German Compliance Crunch: New E-Bilanz Mandate Arrives as Hackers Target ERP Systems
Published on 06/16/2026 at 22:32 | Redaktion boerse-global.de
A wave of regulatory deadlines and sophisticated cyberattacks is squeezing German companies, forcing finance and IT departments to rethink their ERP strategies simultaneously. While the federal government tightens electronic reporting requirements, security researchers warn that cloud-based architectures are opening new doors for data manipulation.
Hacker Groups Exploit Critical Flaws in Enterprise Systems
Security firm Onapsis issued an alert in mid-June about dangerous attack vectors in modern ERP setups such as SAP Clean-Core. In one scenario, attackers exploit vulnerabilities in cloud applications to pivot into on-premises systems. The most alarming threat involves manipulating permission buffers in memory – a trick that standard audit tools cannot detect.
The warnings proved prescient. Ransomware group ShinyHunters hit Oracle PeopleSoft installations in a wave of attacks that began in late May and continued into early June. The hackers exploited a zero-day vulnerability carrying a CVSS score of 9.8 – the highest severity rating. Oracle released a patch on June 10. The problem for companies: such security holes directly undermine the integrity of tax codes and financial data, threatening compliance with reporting obligations.
E-Bilanz 6.10 Becomes Mandatory from 2027
At the same time, the Federal Ministry of Finance published the new E-Bilanz taxonomy in version 6.10 in early June. A decree dated June 8, 2026, makes the updated data schema compulsory for fiscal years ending after December 31, 2026. For companies with a non-calendar fiscal year, the rule applies from 2027/2028.
The new taxonomy includes a preview of a modernized XBRL data model. Businesses may already use version 6.10 voluntarily for the 2026/2027 fiscal year. Test submissions will be possible from November 2026, and real data can be transmitted from May 2027.
AI Slashes Accounting Time as Big Four Invest Heavily
Alongside the regulatory push, automation is accelerating. At a mid-June conference, SEEBURGER and TCG Process demonstrated an AI-powered solution for account coding in SAP environments. The on-premise large language model is pre-trained and promises to cut processing times in accounts payable by up to 80 percent.
Market research underpins the trend: small and medium-sized enterprises (KMU) that adopt AI-driven finance automation save an average of 20 hours per week. Fraud incidents drop by roughly 34 percent, and receivables management improves by 3.7 days. Even the largest auditing firms are placing big bets – one of the "Big Four" has committed over one billion US dollars to integrate AI agents into audit processes by 2030.
Courts and Legislators Clarify Tax Rules
The Federal Fiscal Court (BFH) is adding further precision to documentation requirements. On June 11, the court issued a ruling on VAT liability under Section 14c of the German VAT Act (UStG). The decision: an incorrect invoice issued to an end consumer does not create a tax liability – a finding that directly affects sales through app stores.
The draft of the 2026 Annual Tax Act (Jahressteuergesetz 2026) introduces more changes. Starting in 2028, corrections to wage tax certificates will be possible until the end of February. For 2027, new rules are planned for tax-free supplements and the definition of the primary place of work. The consequence: companies must ensure precise master data in their payroll systems.
Disclaimer regarding our articles: No investment advice, no buy or sell recommendation. Information on prices, companies, and markets is provided without guarantee; changes are possible at any time. Stock market transactions can lead to substantial losses. Our articles are created and reviewed in whole or in part automatically with the support of AI.
