{"title":"Incidents in Germany","description":"Breaches and advisories naming victims in Germany.","home":"https://vulnpocalypse.dev/feeds/","items":[{"id":"https://vulnpocalypse.dev/advisories/n0n-ransomware-group-claims-attack-on-unnamed-german-online-lighting-retailer/","title":"n0n ransomware group claims attack on unnamed German online lighting retailer","url":"https://vulnpocalypse.dev/advisories/n0n-ransomware-group-claims-attack-on-unnamed-german-online-lighting-retailer/","date":"2026-11-04","summary":"The n0n ransomware group claims an unnamed German online lighting retailer on its leak site, RansomLook reports; await a notice from the company.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/charite-universitaetsmedizin-berlin-web-server-breach-exposes-about/","title":"Charite Universitaetsmedizin Berlin: web server breach exposes about 137,500 contact records","url":"https://vulnpocalypse.dev/advisories/charite-universitaetsmedizin-berlin-web-server-breach-exposes-about/","date":"2026-10-30","summary":"Charite said attackers breached the web server hosting its website and contact forms.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/universitaet-rostock-attackers-used-a-hijacked-student-account-police/","title":"Universitaet Rostock: attackers used a hijacked student account, police investigating","url":"https://vulnpocalypse.dev/advisories/universitaet-rostock-attackers-used-a-hijacked-student-account-police/","date":"2026-10-29","summary":"NDR (29 Oct) reports, citing university spokeswoman Kristin Noeltig, that not the whole IT but the account of one student was affected, giving the...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/universitaet-leipzig-it-attack-takes-all-it-services-and-websites/","title":"Universitaet Leipzig: IT attack takes all IT services and websites offline","url":"https://vulnpocalypse.dev/advisories/universitaet-leipzig-it-attack-takes-all-it-services-and-websites/","date":"2026-10-29","summary":"The university said it learned of the incident on 28 Oct 2026 and that on 29 Oct all IT services and websites remained offline.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/a-rosa-hotels-dertour-group-hackers-stole-customer-data-guests/","title":"A-ROSA Hotels (Dertour group): hackers stole customer data, guests notified by email","url":"https://vulnpocalypse.dev/advisories/a-rosa-hotels-dertour-group-hackers-stole-customer-data-guests/","date":"2026-10-29","summary":"Travel trade outlet fvw reports (29 Oct) that hackers stole \"numerous customer records\" from the Arosa hotel chain, which belongs to the Dertour group and...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/warhorse-studios-kingdom-come-developer-confirms-attackers-accessed/","title":"Warhorse Studios: Kingdom Come developer confirms attackers accessed internal systems and company data","url":"https://vulnpocalypse.dev/advisories/warhorse-studios-kingdom-come-developer-confirms-attackers-accessed/","date":"2026-10-27","summary":"Warhorse (Prague) disclosed on 27 Oct that an attacker gained \"unauthorized access to company systems and data\".","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/evangelischer-regionalverband-frankfurt-und-offenbach-cyberattack-it/","title":"Evangelischer Regionalverband Frankfurt und Offenbach: cyberattack, IT switched off","url":"https://vulnpocalypse.dev/advisories/evangelischer-regionalverband-frankfurt-und-offenbach-cyberattack-it/","date":"2026-10-27","summary":"The ERV said in its own magazine (27 Oct) that it was the victim of a cyberattack on part of its IT infrastructure and that its IT is currently switched...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/der-paritaetische-nrw-hackers-steal-data-including-bank-details/","title":"Der Paritaetische NRW: hackers steal data including bank details","url":"https://vulnpocalypse.dev/advisories/der-paritaetische-nrw-hackers-steal-data-including-bank-details/","date":"2026-10-27","summary":"The welfare umbrella association told dpa (via n-tv, 27 Oct) that unknown attackers stole data, in part sensitive data such as bank details, and that...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/ws-audiology-widex-signia-unauthorized-access-to-parts-of-it-crm-and/","title":"WS Audiology (Widex, Signia): unauthorized access to parts of IT, CRM and customer-facing systems taken offline","url":"https://vulnpocalypse.dev/advisories/ws-audiology-widex-signia-unauthorized-access-to-parts-of-it-crm-and/","date":"2026-10-26","summary":"SONIMUNDUS reports WS Audiology informed the public on 26 Oct that unauthorized parties accessed its CRM environment and certain operational IT systems.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/takkt-ag-cyberattack-disrupts-orders-and-deliveries-in-europe-and/","title":"TAKKT AG: cyberattack disrupts orders and deliveries in Europe and North America","url":"https://vulnpocalypse.dev/advisories/takkt-ag-cyberattack-disrupts-orders-and-deliveries-in-europe-and/","date":"2026-10-21","summary":"TAKKT said in an ad hoc notice (21 Oct, 16:26) that it was the target of a cyberattack on parts of its IT systems in its Industrial & Packaging business in...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/landkreis-oberspreewald-lausitz-possible-compromised-client-all/","title":"Landkreis Oberspreewald-Lausitz: possible compromised client, all systems shut down","url":"https://vulnpocalypse.dev/advisories/landkreis-oberspreewald-lausitz-possible-compromised-client-all/","date":"2026-10-21","summary":"The district said it received a warning from the Brandenburg Ministry of the Interior on 20 Oct 2026 at 19:22 about a possible compromise of an IT client...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/cdu-kreisverband-heilbronn-hijacked-email-account-sends-about-6500/","title":"CDU-Kreisverband Heilbronn: hijacked email account sends about 6,500 phishing mails","url":"https://vulnpocalypse.dev/advisories/cdu-kreisverband-heilbronn-hijacked-email-account-sends-about-6500/","date":"2026-10-17","summary":"Police told echo24 (17 Oct) the email went to about 6,500 contacts, many in security-relevant areas, including the Federal Chancellor.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/martin-luther-universitaet-halle-wittenberg-about-51000-applications/","title":"Martin-Luther-Universitaet Halle-Wittenberg: about 51,000 applications likely accessed","url":"https://vulnpocalypse.dev/advisories/martin-luther-universitaet-halle-wittenberg-about-51000-applications/","date":"2026-10-16","summary":"The university said it learned of an attack on its IT systems on 14 Oct 2026 and that unauthorized persons may have accessed about 51,000 applications for...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/humboldt-universitaet-zu-berlin-suspicious-network-activity-devices/","title":"Humboldt-Universitaet zu Berlin: suspicious network activity, devices and servers isolated","url":"https://vulnpocalypse.dev/advisories/humboldt-universitaet-zu-berlin-suspicious-network-activity-devices/","date":"2026-10-16","summary":"Uni-heute reports (16 Oct) that HU's IT department detected unusual network activity on 12 Oct 2026 and classified it as security-relevant.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/seetelhotels-usedom-ransomware-attack-extortion-attempt-and-leak/","title":"SEETELHOTELS (Usedom): ransomware attack, extortion attempt and leak threat","url":"https://vulnpocalypse.dev/advisories/seetelhotels-usedom-ransomware-attack-extortion-attempt-and-leak/","date":"2026-10-14","summary":"The hotel group said its IT detected unauthorized access to internal systems on Saturday 10 Oct 2026 (the later FAQ says 11 Oct) in a ransomware attack...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/notebooksbilligerde-customer-data-possibly-including-bank-details/","title":"notebooksbilliger.de: customer data possibly including bank details exposed","url":"https://vulnpocalypse.dev/advisories/notebooksbilligerde-customer-data-possibly-including-bank-details/","date":"2026-10-14","summary":"ComputerBase reports a customer email dated 14 Oct 2026 in which the retailer reported an attack on its IT systems.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/landratsamt-cham-multi-hour-ddos-disrupts-county-and-connected/","title":"Landratsamt Cham: multi-hour DDoS disrupts county and connected municipalities","url":"https://vulnpocalypse.dev/advisories/landratsamt-cham-multi-hour-ddos-disrupts-county-and-connected/","date":"2026-10-13","summary":"A county spokeswoman told dpa (via Antenne Bayern, 13 Oct) that a multi-hour DDoS attack on Thursday disrupted the municipal network, including several...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/stadt-eichstaett-cyberattack-shuts-town-hall-it-and-in-person-services/","title":"Stadt Eichstaett: cyberattack shuts town hall IT and in-person services","url":"https://vulnpocalypse.dev/advisories/stadt-eichstaett-cyberattack-shuts-town-hall-it-and-in-person-services/","date":"2026-10-12","summary":"The city said (12 Oct) it was the victim of a criminal cyberattack discovered Monday morning.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/mapping-media-freedom-ecpmf-leipzig-germany-ddos-knocked-press/","title":"Mapping Media Freedom / ECPMF (Leipzig, Germany): DDoS knocked press-freedom platform offline","url":"https://vulnpocalypse.dev/advisories/mapping-media-freedom-ecpmf-leipzig-germany-ddos-knocked-press/","date":"2026-10-09","summary":"Per the EFJ (an MFRR partner), a DDoS attack on 30 Sep and 1 Oct 2026 \"overwhelmed the platform's servers and temporarily disrupted public access\".","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/hochschulservicezentrum-baden-wuerttemberg-cyberattack-all-systems/","title":"Hochschulservicezentrum Baden-Wuerttemberg: cyberattack, all systems offline","url":"https://vulnpocalypse.dev/advisories/hochschulservicezentrum-baden-wuerttemberg-cyberattack-all-systems/","date":"2026-10-09","summary":"Staatsanzeiger reports (9 Oct) that the digital service provider for many non-university higher-education institutions in the state, including the public...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/unnamed-car-dealership-in-landshut-customer-data-accessed-at-external/","title":"Unnamed car dealership in Landshut: customer data accessed at external IT provider","url":"https://vulnpocalypse.dev/advisories/unnamed-car-dealership-in-landshut-customer-data-accessed-at-external/","date":"2026-10-08","summary":"Idowa reports (8 Oct) that a Landshut car dealership emailed customers on Wednesday evening warning of unauthorized access to customer data, apparently at...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/stiftung-brandenburgische-gedenkstaetten-second-attack-takes-all/","title":"Stiftung Brandenburgische Gedenkstaetten: second attack takes all memorial websites offline","url":"https://vulnpocalypse.dev/advisories/stiftung-brandenburgische-gedenkstaetten-second-attack-takes-all/","date":"2026-10-08","summary":"rbb24 reports (8 Oct), citing the foundation, that after a cyberattack on Monday evening its websites, those of its seven memorial sites and some project...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/stadt-duelmen-hacked-city-websites-served-fake-captcha-malware-prompts/","title":"Stadt Duelmen: hacked city websites served fake CAPTCHA malware prompts","url":"https://vulnpocalypse.dev/advisories/stadt-duelmen-hacked-city-websites-served-fake-captcha-malware-prompts/","date":"2026-10-08","summary":"The city said attackers altered duelmen.de, duelmen-marketing.de and duelmener-winter.de so that some visitors saw fake \"CAPTCHA\" security checks from...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/kreiskliniken-kassel-criminal-cyberattack-on-hospitals-in-hofgeismar/","title":"Kreiskliniken Kassel: criminal cyberattack on hospitals in Hofgeismar and Wolfhagen","url":"https://vulnpocalypse.dev/advisories/kreiskliniken-kassel-criminal-cyberattack-on-hospitals-in-hofgeismar/","date":"2026-10-08","summary":"WLZ reports (8 Oct) the clinics said they were the target of a criminal attack, detected it early and activated emergency plans.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/buendnis-90die-gruenen-hamburg-automated-attack-on-party-mail-server/","title":"Buendnis 90/Die Gruenen Hamburg: automated attack on party mail server","url":"https://vulnpocalypse.dev/advisories/buendnis-90die-gruenen-hamburg-automated-attack-on-party-mail-server/","date":"2026-10-02","summary":"dpa (via Boyens Medien, 2 Oct) reports the Hamburg Greens' mail server was the target of an automated hacking attack.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/liftstar-gmbh-stairlifts-customer-and-employee-data-including-health/","title":"Liftstar GmbH (stairlifts): customer and employee data, including health data and personnel documents, copied from a server","url":"https://vulnpocalypse.dev/advisories/liftstar-gmbh-stairlifts-customer-and-employee-data-including-health/","date":"2026-10-01","summary":"Liftstar says it was the target of a criminal cyberattack in which \"Daten von Kunden und Mitarbeitenden kopiert und kompromittiert\" were taken.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/hellobetter-german-digital-therapeutics-diga-for-depression-and/","title":"HelloBetter (German digital therapeutics, DiGA for depression and anxiety): internet-exposed BI system breached, therapy data stolen","url":"https://vulnpocalypse.dev/advisories/hellobetter-german-digital-therapeutics-diga-for-depression-and/","date":"2026-09-29","summary":"Attackers reached HelloBetter's business intelligence system and associated database on the evening of 6 Sep 2026.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/kasseler-verkehrs--und-versorgungs-gmbh-kvv-malicious-code-injected/","title":"Kasseler Verkehrs- und Versorgungs-GmbH (KVV): malicious code injected into group websites prompted visitors to install software","url":"https://vulnpocalypse.dev/advisories/kasseler-verkehrs--und-versorgungs-gmbh-kvv-malicious-code-injected/","date":"2026-09-24","summary":"Per hessenschau (24 Sep), KVV said unknown parties embedded malicious code in several of its websites, including kvvks.de, kvg.de, netzplusservice.de and...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/kita-platform-in-verbandsgemeinde-otterbach-otterberg-daycare-file/","title":"Kita platform in Verbandsgemeinde Otterbach-Otterberg: daycare file platform attacked, data encrypted","url":"https://vulnpocalypse.dev/advisories/kita-platform-in-verbandsgemeinde-otterbach-otterberg-daycare-file/","date":"2026-09-23","summary":"Rockland Radio reports (23 Sep), citing the Verbandsgemeinde, that a platform for daycare centres in two local municipalities was attacked.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/universitaet-mannheim-chairs-server-breached-attackers-threaten-to/","title":"Universitaet Mannheim: chair's server breached, attackers threaten to publish data","url":"https://vulnpocalypse.dev/advisories/universitaet-mannheim-chairs-server-breached-attackers-threaten-to/","date":"2026-09-22","summary":"The university said on 22 Sep that unknown parties gained unauthorized access to a server of the Chair of Economic and Business Education, Learning, Design...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/universitaet-bremen-zero-day-attack-on-decentralised-university/","title":"Universitaet Bremen: zero-day attack on decentralised university systems","url":"https://vulnpocalypse.dev/advisories/universitaet-bremen-zero-day-attack-on-decentralised-university/","date":"2026-09-22","summary":"The university said on 22 Sep it was the target of a cyberattack that \"war eine solche Zero-Day-Attacke\" against decentralised facilities.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/hotels-campsites-and-holiday-rentals-in-mecklenburg-vorpommern-guest/","title":"Hotels, campsites and holiday rentals in Mecklenburg-Vorpommern: guest data stolen via booking portals and mailboxes","url":"https://vulnpocalypse.dev/advisories/hotels-campsites-and-holiday-rentals-in-mecklenburg-vorpommern-guest/","date":"2026-09-21","summary":"The state data protection commissioner (LfDI MV) said on 21 Sep it has received unusually many breach reports in recent weeks.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/ludwig-maximilians-universitaet-muenchen-attacker-accessed-server/","title":"Ludwig-Maximilians-Universitaet Muenchen: attacker accessed server with student data including bank data","url":"https://vulnpocalypse.dev/advisories/ludwig-maximilians-universitaet-muenchen-attacker-accessed-server/","date":"2026-09-19","summary":"LMU said (19 Sep) an unauthorized attacker gained access to a server and that it must assume the data was retrieved.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/einheitsgemeinde-stadt-tangerhuette-attack-on-municipal-it-digital/","title":"Einheitsgemeinde Stadt Tangerhuette: attack on municipal IT, digital town hall offline","url":"https://vulnpocalypse.dev/advisories/einheitsgemeinde-stadt-tangerhuette-attack-on-municipal-it-digital/","date":"2026-09-17","summary":"az-online reports (17 Sep), citing the municipality, that its IT infrastructure was the target of a security-relevant attack.","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/berlin-state-administration-two-senate-departments-large-volumes-of/","title":"Berlin state administration (two Senate departments): large volumes of files copied","url":"https://vulnpocalypse.dev/advisories/berlin-state-administration-two-senate-departments-large-volumes-of/","date":"2026-08-14","summary":"Berlin's data protection authority says attackers were active between 7 and 12 Aug 2026 in the networks of the Senate departments for Urban Development...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/unimed-german-medical-billing-service-provider-failed-encryption/","title":"unimed (German medical billing service provider): failed encryption attempt, billing-dispute data stolen affecting many hospitals' patients","url":"https://vulnpocalypse.dev/advisories/unimed-german-medical-billing-service-provider-failed-encryption/","date":"2026-05-22","summary":"unimed detected the attack on 14 Apr 2026; attackers tried and failed to encrypt systems but took data from a limited area, including billing-dispute...","tags":["breach"]},{"id":"https://vulnpocalypse.dev/advisories/mythos-preview-unauthorized-access-through-a-third-party-vendor/","title":"Mythos Preview unauthorized access through a third-party vendor environment","url":"https://vulnpocalypse.dev/advisories/mythos-preview-unauthorized-access-through-a-third-party-vendor/","date":"2026-04-21","summary":"Bloomberg, about 21 Apr 2026: a private Discord group had used Mythos since roughly 7 Apr, through a contractor's still-valid credentials and guessing of...","tags":["breach"]}]}