Germany

Country

Ransomware Attack Halts Operations at Ziegler Fire Engine Manufacturer

February 9, 2023

On February 9th, the company noticed a cyber attack and shut down all systems.

On March 13, company spokes person Matthias Mühlbacher said “It was almost possible to restore the current situation at that time. Normal everyday work is possible again in large parts of the plants. “All software and hardware components were checked, cleaned or replaced and reinstalled with the help of forensic experts from the IT industry.” Some effects, he emphasizes, would accompany the company for a while.

UPDATE, 23 April: Since the ransom was apparently not paid, ALPHV publishes documents that are said to belong to the company.

read more

Cyberattack Affects All Locations of German VDM Steel

January 9, 2023

Unknown perpetrators carried out a cyberattack on VDM Metals. All locations are affected, including those in Werdohl (administration, wire and strip production), Altena (plate and rod production), Unna (melting plant, forge and rod finishing shop) and Siegen (plate rolling mill). Significant parts of the company’s IT infrastructure are affected. Production came to a standstill and parts of the workforce sent home.

Two weeks later production is gradually restarting. The problem seemed to lie in the logistics data flow. VDM communicates most parts of the business will be up and running again by next week.

Several hundred computers have been exchanged in the company. The plant uses server resources from the Spanish parent company Acerinox, as can be seen from the new e-mail addresses of the employees.

read more

Steico Group Operations Disrupted after Cyberattack

March 1, 2023

The building materials manufacturer Steico has become the target of a cyber attack. The incident impacted both manufacturing operations and administration, the company’s website said. The full extent of the attack is currently unknown. It is also unclear whether it was an extortion attack with ransomware.

read more

Cyberattack at SAF-Holland Causes Three Month Production Backlog

March 25, 2023

The commercial vehicle supplier SAF-Holland was the target of a cyber attack. Production is interrupted at certain locations and could last seven to fourteen days. Management is currently assuming that it will be able to catch up on the resulting production backlog over the course of the next three months.

The share, which is listed on the SDax, slipped briefly into the red after the news became known, but was recently up a good one percent again.

read more

Public Transportation “Deutschlandticket” Launch in Germany Disrupted by Ransomware Attack

March 31, 2023

Hannover transport company Üstra suffered a cyberattack with significant operational fallout. The display boards at stations and railways as well as email and telephone traffic in customer service only partially worked throughout the weekend. Since then, Üstra employees have probably been trying feverishly to get the computer systems under control before the planned start of sales of the “Deutschlandticket” on Monday. That didn’t work.

The hackers penetrated the IT systems with a contaminated email attachment that encrypts files. Üstra did not want to say anything about the ransom demand for investigative reasons.

read more

German Steelmaker Hacked

April 20, 2023

The IT network of Badische Stahlwerke (BSW) is affected by unauthorized network access. BSW identified the hacker attack on Thursday. The company reacted immediately and shut down all relevant systems in an isolated and controlled manner.

This also affected parts of the production. Employees reportedly furloughed. Parts of the production facilities were started up again on Friday. Investigation is ongoing.

read more

Cyberattack Causes Widespread Operational Disruption at Rheinische Post Mediagruppe

June 16, 2023

The “Rheinische Post Mediengruppe” has to shut down some systems because of a cyberattack. The operation of the news portals is only possible to a limited extent. Emergency editions of the affected newspapers were published on Monday. Unfortunately, the printed and digital editions cannot be offered in the usual structure, stated the “Rheinische Post”.

Individual technical systems had to be switched off and the connection to the Internet had to be cut, according to the “Rheinische Post”. The “Aachener Zeitung”, which belongs to the media group, addressed the readers on the first page and wrote of an emergency edition “that does not fully correspond to what you are used to from us”. The Bonn “General-Anzeiger” reacted with an edition that appeared “not in the usual scope and in the usual timeliness”.

read more

German Autoparts Specialist, the Bilstein Group, Confirms Cyberattack

April 29, 2023

The Bilstein Group was apparently recently hit by a ransomware attack. The perpetrators published company data on the dark web. The auto parts specialist confirmed to CSO that a recent cyber attack occurred. “However, this was quickly discovered by our systems and IT specialists, so that the effects were marginal,” explained a spokesman. The company declined to release any further information about the case. It is not known if there was a ransom note.

The BianLian ransomware gang has put the Bilstein Group on its victim list. In late April, 60GB of internal company data surfaced on the dark web, this includes includes personnel, accounting and financial data.

read more

Emergency Operational Shutdown at Maxim, German Cosmetics Manufacturer

April 29, 2023

The cosmetics manufacturer Maxim fell victim to a ransomware attack, reports CSO Online Germany. The IT systems and production are affected. According to media reports, hackers penetrated the IT systems of the cosmetics manufacturer Maxim in early May. The cyber attack was initially discovered due to a “disruption to the network structure”. The perpetrators encrypted parts of the IT systems and demanded a ransom. So far it is unclear whether company data was stolen.

As soon as the attack was discovered, all IT systems were shut down immediately, a spokeswoman told the Kölner Stadt-Anzeiger . Because of the immediate shutdown, the ransom demand could not be seen, so it is not clear how much they asked for decrypting the hacked systems.

On May 10, company spokeswoman Janine Kops states that all IT systems and devices are currently being checked for malicious software. “The work is progressing rapidly and it is becoming apparent that the IT systems that are currently still deactivated will go into secure and monitored emergency operation this week,” says Kops. The cyber attack at the end of April led to an emergency shutdown of the systems; since then, production and delivery at Maxim have been paralyzed.

A professional hacker group claimed responsibility for the attack on Maxim, but the spokeswoman declined to give any further details for security reasons.

read more

Operations Paralyzed Across All Locations of German Automotive Supplier Fritzmeier Gruppe.

January 17, 2023

Hackers paralyzed the Internet, telephone and some machines at the large vehicle supplier Fritzmeier. The attack was detected early Tuesday morning, after which all relevant systems were immediately shut down. “The attack affects all systems across all locations, so that we are currently severely restricted in our ability to work and availability,” said the company spokesman Florian Linnerbauer .

Four weeks after the hacker attack, operations are up and running again. However, it is still unclear who is behind the attack. “Currently, all locations are back to normal operation,” said Linnerbauer. According to Linnerbauer, the ability to deliver was largely guaranteed during the cyber attack. Thanks to a “comprehensive backup strategy important data could be quickly made available again”. After limiting the damage, the focus for the group is on repairing the damage and taking preventive measures.

The actual financial damage for the Fritzmeier Group is currently being evaluated internally. “We cannot and will not provide any information on this for reasons of investigative tactics.”

(e Bike supplier ,M1-Sporttechnik, part of the Fritzmeier Group was also affected. )

read more