Cyberattack Forces Temporary Production Disruption at Heim & Haus

Heim & Haus, one of Germany’s largest producers and direct sellers of building components, suffered a ransomware attack. The attackers gained unauthorized access to IT systems and encrypted data. The encrypted IT systems were taken offline immediately. Corporate networks, email, customer portals, and internal services were inaccessible for days. Production systems were restored and returned to full operational capacity by early July 2025, with communications channels (phone, email) reactivated soon after. A July 10 update stated core systems (customer portal, direct sales, assembly scheduling) were back online, though processing delays or restricted access could still occur for some services.

Reports indicate about 48 GB of internal information was exfiltrated and posted as proof by the ransomware group Kawa4096.

Estimated Cost

> 2 weeks operational disruption, 48GB data stolen

Threat Source

Impacts

OT IT