Breaches and incidents
Liftstar GmbH (stairlifts): customer and employee data, including health data and personnel documents, copied from a server
Liftstar says it was the target of a criminal cyberattack in which “Daten von Kunden und Mitarbeitenden kopiert und kompromittiert” were taken.
- Disclosed
- Verification
- Checked against a primary source
What happened
- Liftstar says it was the target of a criminal cyberattack in which “Daten von Kunden und Mitarbeitenden kopiert und kompromittiert” were taken; per Gesundheitsprofi (1 Oct), police informed the company on 23 Sep 2026 and the copied data on a data server includes personnel documents, health data and photos of stairlift installations.
- Root cause: not disclosed; Liftstar says it closed the access route.
- No attacker named; police seized the server and identified suspects. Liftstar says there is no evidence so far the data was passed on or published.
- Customers and staff were informed directly, external forensic experts engaged and the BSI and data protection authority informed (Gesundheitsprofi); Liftstar warns it never asks for passwords, account details or money by phone and never changes bank details by email.