Germany

Country

Cyberattacks on North German Shipyards

March 3, 2023

The Flensburger Schiffbau-Gesellschaft (FSG) and the Rendsburg shipyard Nobiskrug have fallen victim to a cyberattack. The external attack on the shipyard’s IT was noticed on March 3, a spokesman for FSG-Nobiskrug Holding said on Friday. “All IT systems were therefore sealed off by our experts and the responsible authorities informed.”

BianLian ransomware group claims responsibility as it added Flensburger Schiffbau-Gesellschaft and Nobiskrug to their victimlist and claims to have access to 3TB of company data.

FSG-Nobiskrug Holding did not comment on this.

read more

Operations Halted at German Shipbuilder

April 12, 2023

German shipbuilder Lürssen, which makes military vessels as well as luxury yachts, reports it has been the target of a ransomware attack. The attack brought large parts of Lürssen’s shipyard operations to a standstill, according to local news outlet Buten un Binnen.

According to several German media outlets, Lürssen said it is collaborating with internal and external experts to manage the cyber incident.

read more

Siemens Energy AG Confirms Ransomware Attack

June 27, 2023

Cl0p ransomware group claimed the cyber attack on Siemens Energy and four other organizations including Schneider Electric and the University of California Los Angeles.

Siemens Energy spokesperson, Claudia Nehring, stated, “Regarding the global data security incident, Siemens Energy is among the targets. Based on the current analysis, no critical data has been compromised and our operations have not been affected. We took immediate action when we learned about the incident.”

Siemens Energy in-house ProductCERT team has not released any statements or updates regarding the alleged cyber attack. The team is responsible for handling all security-related matters pertaining to their products, solutions, and services.

Cl0p listed Siemens Energy on their data leak site. The group has been wreaking havoc on various organizations in recent weeks.

read more

European defense contractor, Hensoldt, allegedly Victim of Snatch Ransomware Attack.

August 18, 2022

A French subsidiary of HENSOLDT AG, and part of its subsidiaries (“Nexeya”), have become the target of a serious cyber attack on its IT infrastructure in recent days. According to current information, both of Nexeya’s data centers in France have been affected, and it is likely that a significant amount of data has been accessed and systems have been encrypted. Nexeya’s ongoing operations have been impacted by this cyber attack.

A comprehensive investigation of the incident has been launched immediately, in close cooperation with the relevant authorities.

Work is proceeding at full speed to restore Nexeya’s ongoing operations as quickly as possible. According to current knowledge, the IT infrastructure and data of other companies of the HENSOLDT Group are not affected.

read more

German Software Provider Bismarck Suffers Data Leak

January 23, 2023

On January 23, media reports suggested that Bitmarck, an IT service provider for
German health insurance companies, had suffered a data leak. A cybercrime group
reportedly extracted data from the company’s Jira project management and
databases and put it up for sale. There is no indication that any personal health
data was exposed.

read more

Entire Data Centers Taken Offline at Giant German IT Service Provider Bitmarck

April 30, 2023

Bitmarck, one of the largest IT service providers within Germany’s statutory health insurance system, announced on Sunday it had taken all of its customer and internal systems offline due to a cyberattack.

Bitmarck, which employs around 1,600 people, said that the customer and internal systems were

Taking these services offline impacts a range of individuals and organizations associated with Bitmarck’s services, particularly those who rely on the company to issue electronic sickness certificates used in Germany to pay employees’ leave. Bitmarck also warned that pharmacies it works with may also experience technical problems.

In its statement, the company said disruptions were likely to continue “for the foreseeable future,” as entire data centers were taken offline and restarting these was likely to be accompanied by temporary service failure.

“We very much regret the inconvenience caused to our customers, service providers and insured persons and are working to restore the systems as quickly as possible,” the company stated.

read more

Ransomware Attack at German Furniture Company Häfele.

February 2, 2023

German kitchen system specialist Hafele was hit by a ransomware attack at its headquarters on the night of Feb. 2, 2023. The attack targeted the IT systems of the Häfele Worldwide Group from an external source. According to the company, the shutdown of our systems is now being followed by a gradual and controlled reactivation, the company said in a statement on its website. The company did not say when it would be fully operational.

UPDATE: Häfele was able to rebuilt its 50+ country, 180-site network in under 30 days with the help of SASE.

read more

Rheinmetall’s Automotive Sector Hit by Cyberattack

April 14, 2023

German automotive and arms manufacturer Rheinmetall suffered a cyberattack on Friday, the company said. The attack hit Rheinmetall’s business unit that serves industrial customers, particularly in the automotive sector. The company’s defense division — which produces military vehicles, weapons, and ammunition — remained unaffected and continues to operate “reliably,” Rheinmetall’s spokesperson Oliver Hoffmann said in an email to Recorded Future News. Rheinmetall is currently investigating the extent of the damage and is in close contact with the relevant cybersecurity authorities, Hoffmann said.

UPDATE September ’23, Reuters: “Normal production processes at these locations are currently experiencing significant disruption,” Rheinmetall said in a statement late on Thursday. “The IT infrastructure in the region has been shut down and is currently being rebuilt”,

The timing of the attack aligned with Rheinmetall’s talks of constructing a new tank factory in Ukraine.

read more

German Biotechnology Company Evotec Shuts Down IT Systems

April 6, 2023

Evotec SE, the German biotechnology company, recently succumbed to a cyberattack. In a communiqué, the company said it preemptively shut down its IT systems as a result of the attack, disconnecting them from the internet. Evotec noted that its IT team is currently examining its IT systems to review the scope of the attack. “Highest diligence will be applied to data integrity,” it added in an announcement. Its Nasdaq shares appeared to be unaffected by the revelation, which described a IT network intrusion occurring on April 6.

The company has informed relevant authorities and said it had disconnected selected IT systems, but that it maintains business continuity at all global sites, prioritizing data integrity.

read more

OT Systems Impacted at HiPP, a German Baby Food Manufacturer

October 5, 2022

HiPP, a Pfaffenhofen, Bavaria based baby food manufacturer was hit by a cyber attack which affected it IT and OT systems. The company sells its baby food worldwide. The company was not forthcoming with many details as to the nature of the attack, but the Central Office for cybercrime Bavaria (ZCB) was involved in the investigation into the incident. Production was halted for days after the incident, and over 1,000 employees were not able to work and sent home.

read more