September 26, 2024
The email account of D. Rabeneck, managing director of the Schaumburg-Lippe municipal utility, has been compromised: Cyber criminals have gained access to the account and apparently sent masses of phishing emails to Rabeneck’s contacts – This information was confirmed by the municipal utility in a press release
October 11, 2024
The Hubergroup, a world-leading manufacturer of printing inks, has become the target of a cyber attack. The SAP system, the Internet and also production have been restricted for almost two weeks, as a reader told us. The Hubergroup has now confirmed the incident to CelleHeute, but remains rather vague about the exact effects – including with regard to the site in Celle.
“The hubergroup has become the target of a malware attack that has affected individual, regional IT systems,” said Fabian Meyer-Theobaldy . The press spokesman emphasized that the company’s security systems had reacted immediately. Thanks to these measures, large parts of the internationally active Hubergroup were not affected by the attack.
November 11, 2024
Hackers have attacked the electricity provider Tibber and stolen data. Apparently over 50,000 customers are affected, all from Germany. Since November 11, a dataset titled “Tibber Data Breach – Leaked, Download” has been available on a popular darknet forum. Some sample lines contain name, email address, order amount and incomplete address data.
June 12, 2024
Meiller Kipper, a vehicle manufacturer based in Munich, Bavaria, Germany, has recently been targeted in a cyber attack, according to information disclosed by the company. Authorities alerted the company to specific indicators of the attack, prompting Meiller Kipper to engage security and forensic experts to assess the situation. As a precautionary measure to protect their business partners, Meiller Kipper has opted to deactivate all established Internet-based communication channels, including landline telephony, until the investigation yields concrete results.
Statement on the Meiller Kipper website reads: “Due to a cyber attack, our employees and some services have only been available to a limited extent over the past 14 days. We are pleased to inform you that we have checked our systems and that MEILLER is again available as usual via all channels by phone, email and online.”
October 11, 2024
Volkswagen has issued a statement after the 8Base ransomware group claimed to have stolen valuable data from the company’s systems. “This incident is known,” a Volkswagen spokesperson told SecurityWeek, adding, “The IT infrastructure of the Volkswagen Group is not affected. We are continuing to monitor the situation closely.”
The company has not shared any other information on the cyberattack. Its brief statement comes after the ransomware gang 8Base named the carmaker on its leak website. 8Base claims to have stolen invoices, receipts, accounting documents, personal data, certificates, employment contracts, personnel files, and “a huge amount of confidential information”.
October 28, 2024
AEP, a German pharmaceutical wholesaler based in Bavaria, said it was hit by a ransomware attack. Pharmacies are currently only being supplied to a limited extent by AEP.. The Bavarian Pharmacists Association said that affected pharmacies should be able to use supplies from other wholesalers to make up for the disruption, as reported by Bayerischer Rundfunk.
On October 28, AEP fell victim to a targeted cyber attack that led to partial encryption of the company’s IT systems. The company is currently not reachable by phone and can only be reached to a very limited extent by email.
August 29, 2024
The German Air Traffic Control (DFS) has been the target of a hacker attack. “Our office communications have been hacked. We are currently taking defensive measures.,” a DFS spokesperson told the German Press Agency. They are trying to keep the impact to a minimum. Air traffic is not affected and is continuing as normal.
According to DFS, the attack happened last week. Whether the hackers were able to obtain data access is still unknown. According to information from Bayerischer Rundfunk, the hacker group “APT 28” is involved in the attack.
January 1, 2010
[Publicly reported April 2024]
Suspected Chinese state hackers breached Volkswagen’s systems and stole sensitive information over several years (2010-2015), including details about gasoline engines, transmission development, fuel cells, and electric vehicle initiatives. At least 19,000 documents related to the company’s research and development were exfiltrated.
ZDF frontal and “Spiegel” were able to view more than 40 documents as part of an international cooperation on Chinese espionage activities in Europe
showing what the data thieves stole.
January 8, 2024
An online attack on the railway company Transdev has temporarily led to restrictions on the websites of the Nordwestbahn and the Rhein-Ruhr-Bahn on Monday and Tuesday.
The attackers had directed a spam wave at forms on the Nordwestbahn page on Monday morning, Transdev announced on Tuesday on request. The measures undertaken were gradually reduced the next day. “The Rhein-Ruhr-Bahn, the website is accessible again without problems. Only on the Nordwestbahn website, increased protective measures are currently still ongoing, which are still being readjusted,” it was said.
January 3, 2024
Car maker Hyundai Motor Europe suffered a Black Basta ransomware attack, with the threat actors claiming to have stolen three terabytes of corporate data. Hyundai confirmed to BleepingComputer that they suffered a cyberattack.
BleepingComputer reports learning Black Basta ransomware operation conducted the attack in early January, when they claimed to have stolen 3 TB of data from Hyundai Motor Europe.