February 15, 2024
PSI Software SE, a German software developer for complex production and logistics processes, has confirmed that the cyber incident it disclosed last week is a ransomware attack that impacted its internal infrastructure. The IT systems and the extent of the impacts are currently being checked.
The company operates at a global level with a staff of more than 2,000 and specializes in software solutions for major energy suppliers.
March 16, 2024
On March 16, BerlinerLuft. Technik GmbH, Berlin, fell victim to a cyber attack causing “possible disruptions in the production/manufacturing process and delays in delivery”.
Timeline as reported on the company website:
27 March: Production resumed of duct components, louvre dampers and sound insulation baffles at our German and Polish locations.
08 April : Production and operations resumed at all locations.
23 April: IT infrastructure restored, ERP up and running.
April 22, 2024
Bieler Lang was the victim of a ransomware attack on April 22, 2024. The extortion group 8BASE was able to steal the company’s data during the attack. The stolen data includes financial data, employment contracts, confidentiality agreements and other confidential documents.
April 25, 2024
Cyberattack on Max Wild GmbH. The company website reports:
Cyber criminals managed to break through IT security barriers and existing protection systems and penetrate our IT systems. The attack was detected on April 25 and then immediately stopped.
In order to be able to fully examine the IT systems and avert further attacks, many of our IT systems are currently switched off. restrictions in digital communication and telephone accessibility possible
March 25, 2024
Ringhoffer Verzahnungstechnik was the victim of a ransomware attack on March 25, 2024. The blackmail group 8BASE was able to steal the company’s data during the attack. The stolen data includes financial data, employment contracts and other confidential documents. The blackmailers have since published these.
May 1, 2024
The waste management company (AWG) in Bassum was unreachable by phone for two weeks at the beginning of May. The company has now announced that this was due to a cyber attack. The disruption meant that all of the company’s landlines were unavailable, and bulky waste could no longer be registered online. No customer data was at risk.
In order to resolve the problem, AWG called in a crisis team and took the entire company offline.
May 11, 2024
The Emmendingen plant manufacturer Wehrle has fallen victim to hackers.
According to the Badische Zeitung, the attack was carried out on May 11. Since then, the company’s production and communication have been severely restricted. The company announced yesterday Tuesday that it was working intensively to restore the affected systems and resume full operations.
May 11, 2024
On Saturday, May 11, 2024, the agricultural technology specialist LEMKEN was attacked by hackers. The criminal attack extends to all locations worldwide. To protect against further access, all IT systems were immediately shut down and external specialists were called in. Production operations are currently stopped, and employees in the office areas can work remotely. Important LEMKEN contacts can still be reached by email or mobile phone.
May 19, 2024
Hamburg Airport was affected by a hacker attack on an IT system used to monitor and document security patrols on May 19. The affected system is hosted separately by a service provider and has no connection to other systems at the airport, according to those responsible.
“The attack by the Killmilk/Just Evil group was repelled and no security-relevant information was intercepted,” the airport explained. Other systems were not affected and there were no effects on air traffic.
May 1, 2024
Starting on Friday 17 May, several of ESO’s network and communication services were shut down to allow for an important software upgrade to be deployed. The upgrade is being done in response to a cyber security incident. In addition to the shutdown, mitigating this threat included limiting communications regarding the incident to avoid compromising ESO’s cyber security response plan. 
As of Tuesday 21 May, email services have been restored and the ESO website is back online. Other services, such as the ESO and ALMA Science Archives, are expected to be restored in the coming days. 
ESO’s IT team is working together with a cyber security consultant on detecting and clearing malicious software from all ESO’s machines, as well as on investigating the attack and its consequences. ESO observations have not been affected since our observatories run largely on separate networks. ELT construction remains unaffected.