<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Vulnpocalypse: Incidents in Germany</title><link>https://vulnpocalypse.dev/feeds/</link><description>Breaches and advisories naming victims in Germany.</description><language>en</language><lastBuildDate>Thu, 12 Nov 2026 16:59:02 +0000</lastBuildDate><atom:link href="https://vulnpocalypse.dev/feeds/country-de.xml" rel="self" type="application/rss+xml"/><item><title>n0n ransomware group claims attack on unnamed German online lighting retailer</title><link>https://vulnpocalypse.dev/advisories/n0n-ransomware-group-claims-attack-on-unnamed-german-online-lighting-retailer/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/n0n-ransomware-group-claims-attack-on-unnamed-german-online-lighting-retailer/</guid><pubDate>Wed, 04 Nov 2026 12:00:00 +0000</pubDate><description>The n0n ransomware group claims an unnamed German online lighting retailer on its leak site, RansomLook reports; await a notice from the company.</description><category>breach</category></item><item><title>Charite Universitaetsmedizin Berlin: web server breach exposes about 137,500 contact records</title><link>https://vulnpocalypse.dev/advisories/charite-universitaetsmedizin-berlin-web-server-breach-exposes-about/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/charite-universitaetsmedizin-berlin-web-server-breach-exposes-about/</guid><pubDate>Fri, 30 Oct 2026 12:00:00 +0000</pubDate><description>Charite said attackers breached the web server hosting its website and contact forms.</description><category>breach</category></item><item><title>Universitaet Rostock: attackers used a hijacked student account, police investigating</title><link>https://vulnpocalypse.dev/advisories/universitaet-rostock-attackers-used-a-hijacked-student-account-police/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/universitaet-rostock-attackers-used-a-hijacked-student-account-police/</guid><pubDate>Thu, 29 Oct 2026 12:00:00 +0000</pubDate><description>NDR (29 Oct) reports, citing university spokeswoman Kristin Noeltig, that not the whole IT but the account of one student was affected, giving the...</description><category>breach</category></item><item><title>Universitaet Leipzig: IT attack takes all IT services and websites offline</title><link>https://vulnpocalypse.dev/advisories/universitaet-leipzig-it-attack-takes-all-it-services-and-websites/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/universitaet-leipzig-it-attack-takes-all-it-services-and-websites/</guid><pubDate>Thu, 29 Oct 2026 12:00:00 +0000</pubDate><description>The university said it learned of the incident on 28 Oct 2026 and that on 29 Oct all IT services and websites remained offline.</description><category>breach</category></item><item><title>A-ROSA Hotels (Dertour group): hackers stole customer data, guests notified by email</title><link>https://vulnpocalypse.dev/advisories/a-rosa-hotels-dertour-group-hackers-stole-customer-data-guests/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/a-rosa-hotels-dertour-group-hackers-stole-customer-data-guests/</guid><pubDate>Thu, 29 Oct 2026 12:00:00 +0000</pubDate><description>Travel trade outlet fvw reports (29 Oct) that hackers stole &quot;numerous customer records&quot; from the Arosa hotel chain, which belongs to the Dertour group and...</description><category>breach</category></item><item><title>Warhorse Studios: Kingdom Come developer confirms attackers accessed internal systems and company data</title><link>https://vulnpocalypse.dev/advisories/warhorse-studios-kingdom-come-developer-confirms-attackers-accessed/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/warhorse-studios-kingdom-come-developer-confirms-attackers-accessed/</guid><pubDate>Tue, 27 Oct 2026 12:00:00 +0000</pubDate><description>Warhorse (Prague) disclosed on 27 Oct that an attacker gained &quot;unauthorized access to company systems and data&quot;.</description><category>breach</category></item><item><title>Evangelischer Regionalverband Frankfurt und Offenbach: cyberattack, IT switched off</title><link>https://vulnpocalypse.dev/advisories/evangelischer-regionalverband-frankfurt-und-offenbach-cyberattack-it/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/evangelischer-regionalverband-frankfurt-und-offenbach-cyberattack-it/</guid><pubDate>Tue, 27 Oct 2026 12:00:00 +0000</pubDate><description>The ERV said in its own magazine (27 Oct) that it was the victim of a cyberattack on part of its IT infrastructure and that its IT is currently switched...</description><category>breach</category></item><item><title>Der Paritaetische NRW: hackers steal data including bank details</title><link>https://vulnpocalypse.dev/advisories/der-paritaetische-nrw-hackers-steal-data-including-bank-details/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/der-paritaetische-nrw-hackers-steal-data-including-bank-details/</guid><pubDate>Tue, 27 Oct 2026 12:00:00 +0000</pubDate><description>The welfare umbrella association told dpa (via n-tv, 27 Oct) that unknown attackers stole data, in part sensitive data such as bank details, and that...</description><category>breach</category></item><item><title>WS Audiology (Widex, Signia): unauthorized access to parts of IT, CRM and customer-facing systems taken offline</title><link>https://vulnpocalypse.dev/advisories/ws-audiology-widex-signia-unauthorized-access-to-parts-of-it-crm-and/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/ws-audiology-widex-signia-unauthorized-access-to-parts-of-it-crm-and/</guid><pubDate>Mon, 26 Oct 2026 12:00:00 +0000</pubDate><description>SONIMUNDUS reports WS Audiology informed the public on 26 Oct that unauthorized parties accessed its CRM environment and certain operational IT systems.</description><category>breach</category></item><item><title>TAKKT AG: cyberattack disrupts orders and deliveries in Europe and North America</title><link>https://vulnpocalypse.dev/advisories/takkt-ag-cyberattack-disrupts-orders-and-deliveries-in-europe-and/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/takkt-ag-cyberattack-disrupts-orders-and-deliveries-in-europe-and/</guid><pubDate>Wed, 21 Oct 2026 12:00:00 +0000</pubDate><description>TAKKT said in an ad hoc notice (21 Oct, 16:26) that it was the target of a cyberattack on parts of its IT systems in its Industrial &amp; Packaging business in...</description><category>breach</category></item><item><title>Landkreis Oberspreewald-Lausitz: possible compromised client, all systems shut down</title><link>https://vulnpocalypse.dev/advisories/landkreis-oberspreewald-lausitz-possible-compromised-client-all/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/landkreis-oberspreewald-lausitz-possible-compromised-client-all/</guid><pubDate>Wed, 21 Oct 2026 12:00:00 +0000</pubDate><description>The district said it received a warning from the Brandenburg Ministry of the Interior on 20 Oct 2026 at 19:22 about a possible compromise of an IT client...</description><category>breach</category></item><item><title>CDU-Kreisverband Heilbronn: hijacked email account sends about 6,500 phishing mails</title><link>https://vulnpocalypse.dev/advisories/cdu-kreisverband-heilbronn-hijacked-email-account-sends-about-6500/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/cdu-kreisverband-heilbronn-hijacked-email-account-sends-about-6500/</guid><pubDate>Sat, 17 Oct 2026 12:00:00 +0000</pubDate><description>Police told echo24 (17 Oct) the email went to about 6,500 contacts, many in security-relevant areas, including the Federal Chancellor.</description><category>breach</category></item><item><title>Martin-Luther-Universitaet Halle-Wittenberg: about 51,000 applications likely accessed</title><link>https://vulnpocalypse.dev/advisories/martin-luther-universitaet-halle-wittenberg-about-51000-applications/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/martin-luther-universitaet-halle-wittenberg-about-51000-applications/</guid><pubDate>Fri, 16 Oct 2026 12:00:00 +0000</pubDate><description>The university said it learned of an attack on its IT systems on 14 Oct 2026 and that unauthorized persons may have accessed about 51,000 applications for...</description><category>breach</category></item><item><title>Humboldt-Universitaet zu Berlin: suspicious network activity, devices and servers isolated</title><link>https://vulnpocalypse.dev/advisories/humboldt-universitaet-zu-berlin-suspicious-network-activity-devices/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/humboldt-universitaet-zu-berlin-suspicious-network-activity-devices/</guid><pubDate>Fri, 16 Oct 2026 12:00:00 +0000</pubDate><description>Uni-heute reports (16 Oct) that HU&#x27;s IT department detected unusual network activity on 12 Oct 2026 and classified it as security-relevant.</description><category>breach</category></item><item><title>SEETELHOTELS (Usedom): ransomware attack, extortion attempt and leak threat</title><link>https://vulnpocalypse.dev/advisories/seetelhotels-usedom-ransomware-attack-extortion-attempt-and-leak/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/seetelhotels-usedom-ransomware-attack-extortion-attempt-and-leak/</guid><pubDate>Wed, 14 Oct 2026 12:00:00 +0000</pubDate><description>The hotel group said its IT detected unauthorized access to internal systems on Saturday 10 Oct 2026 (the later FAQ says 11 Oct) in a ransomware attack...</description><category>breach</category></item><item><title>notebooksbilliger.de: customer data possibly including bank details exposed</title><link>https://vulnpocalypse.dev/advisories/notebooksbilligerde-customer-data-possibly-including-bank-details/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/notebooksbilligerde-customer-data-possibly-including-bank-details/</guid><pubDate>Wed, 14 Oct 2026 12:00:00 +0000</pubDate><description>ComputerBase reports a customer email dated 14 Oct 2026 in which the retailer reported an attack on its IT systems.</description><category>breach</category></item><item><title>Landratsamt Cham: multi-hour DDoS disrupts county and connected municipalities</title><link>https://vulnpocalypse.dev/advisories/landratsamt-cham-multi-hour-ddos-disrupts-county-and-connected/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/landratsamt-cham-multi-hour-ddos-disrupts-county-and-connected/</guid><pubDate>Tue, 13 Oct 2026 12:00:00 +0000</pubDate><description>A county spokeswoman told dpa (via Antenne Bayern, 13 Oct) that a multi-hour DDoS attack on Thursday disrupted the municipal network, including several...</description><category>breach</category></item><item><title>Stadt Eichstaett: cyberattack shuts town hall IT and in-person services</title><link>https://vulnpocalypse.dev/advisories/stadt-eichstaett-cyberattack-shuts-town-hall-it-and-in-person-services/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/stadt-eichstaett-cyberattack-shuts-town-hall-it-and-in-person-services/</guid><pubDate>Mon, 12 Oct 2026 12:00:00 +0000</pubDate><description>The city said (12 Oct) it was the victim of a criminal cyberattack discovered Monday morning.</description><category>breach</category></item><item><title>Mapping Media Freedom / ECPMF (Leipzig, Germany): DDoS knocked press-freedom platform offline</title><link>https://vulnpocalypse.dev/advisories/mapping-media-freedom-ecpmf-leipzig-germany-ddos-knocked-press/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/mapping-media-freedom-ecpmf-leipzig-germany-ddos-knocked-press/</guid><pubDate>Fri, 09 Oct 2026 12:00:00 +0000</pubDate><description>Per the EFJ (an MFRR partner), a DDoS attack on 30 Sep and 1 Oct 2026 &quot;overwhelmed the platform&#x27;s servers and temporarily disrupted public access&quot;.</description><category>breach</category></item><item><title>Hochschulservicezentrum Baden-Wuerttemberg: cyberattack, all systems offline</title><link>https://vulnpocalypse.dev/advisories/hochschulservicezentrum-baden-wuerttemberg-cyberattack-all-systems/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/hochschulservicezentrum-baden-wuerttemberg-cyberattack-all-systems/</guid><pubDate>Fri, 09 Oct 2026 12:00:00 +0000</pubDate><description>Staatsanzeiger reports (9 Oct) that the digital service provider for many non-university higher-education institutions in the state, including the public...</description><category>breach</category></item><item><title>Unnamed car dealership in Landshut: customer data accessed at external IT provider</title><link>https://vulnpocalypse.dev/advisories/unnamed-car-dealership-in-landshut-customer-data-accessed-at-external/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/unnamed-car-dealership-in-landshut-customer-data-accessed-at-external/</guid><pubDate>Thu, 08 Oct 2026 12:00:00 +0000</pubDate><description>Idowa reports (8 Oct) that a Landshut car dealership emailed customers on Wednesday evening warning of unauthorized access to customer data, apparently at...</description><category>breach</category></item><item><title>Stiftung Brandenburgische Gedenkstaetten: second attack takes all memorial websites offline</title><link>https://vulnpocalypse.dev/advisories/stiftung-brandenburgische-gedenkstaetten-second-attack-takes-all/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/stiftung-brandenburgische-gedenkstaetten-second-attack-takes-all/</guid><pubDate>Thu, 08 Oct 2026 12:00:00 +0000</pubDate><description>rbb24 reports (8 Oct), citing the foundation, that after a cyberattack on Monday evening its websites, those of its seven memorial sites and some project...</description><category>breach</category></item><item><title>Stadt Duelmen: hacked city websites served fake CAPTCHA malware prompts</title><link>https://vulnpocalypse.dev/advisories/stadt-duelmen-hacked-city-websites-served-fake-captcha-malware-prompts/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/stadt-duelmen-hacked-city-websites-served-fake-captcha-malware-prompts/</guid><pubDate>Thu, 08 Oct 2026 12:00:00 +0000</pubDate><description>The city said attackers altered duelmen.de, duelmen-marketing.de and duelmener-winter.de so that some visitors saw fake &quot;CAPTCHA&quot; security checks from...</description><category>breach</category></item><item><title>Kreiskliniken Kassel: criminal cyberattack on hospitals in Hofgeismar and Wolfhagen</title><link>https://vulnpocalypse.dev/advisories/kreiskliniken-kassel-criminal-cyberattack-on-hospitals-in-hofgeismar/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/kreiskliniken-kassel-criminal-cyberattack-on-hospitals-in-hofgeismar/</guid><pubDate>Thu, 08 Oct 2026 12:00:00 +0000</pubDate><description>WLZ reports (8 Oct) the clinics said they were the target of a criminal attack, detected it early and activated emergency plans.</description><category>breach</category></item><item><title>Buendnis 90/Die Gruenen Hamburg: automated attack on party mail server</title><link>https://vulnpocalypse.dev/advisories/buendnis-90die-gruenen-hamburg-automated-attack-on-party-mail-server/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/buendnis-90die-gruenen-hamburg-automated-attack-on-party-mail-server/</guid><pubDate>Fri, 02 Oct 2026 12:00:00 +0000</pubDate><description>dpa (via Boyens Medien, 2 Oct) reports the Hamburg Greens&#x27; mail server was the target of an automated hacking attack.</description><category>breach</category></item><item><title>Liftstar GmbH (stairlifts): customer and employee data, including health data and personnel documents, copied from a server</title><link>https://vulnpocalypse.dev/advisories/liftstar-gmbh-stairlifts-customer-and-employee-data-including-health/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/liftstar-gmbh-stairlifts-customer-and-employee-data-including-health/</guid><pubDate>Thu, 01 Oct 2026 12:00:00 +0000</pubDate><description>Liftstar says it was the target of a criminal cyberattack in which &quot;Daten von Kunden und Mitarbeitenden kopiert und kompromittiert&quot; were taken.</description><category>breach</category></item><item><title>HelloBetter (German digital therapeutics, DiGA for depression and anxiety): internet-exposed BI system breached, therapy data stolen</title><link>https://vulnpocalypse.dev/advisories/hellobetter-german-digital-therapeutics-diga-for-depression-and/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/hellobetter-german-digital-therapeutics-diga-for-depression-and/</guid><pubDate>Tue, 29 Sep 2026 12:00:00 +0000</pubDate><description>Attackers reached HelloBetter&#x27;s business intelligence system and associated database on the evening of 6 Sep 2026.</description><category>breach</category></item><item><title>Kasseler Verkehrs- und Versorgungs-GmbH (KVV): malicious code injected into group websites prompted visitors to install software</title><link>https://vulnpocalypse.dev/advisories/kasseler-verkehrs--und-versorgungs-gmbh-kvv-malicious-code-injected/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/kasseler-verkehrs--und-versorgungs-gmbh-kvv-malicious-code-injected/</guid><pubDate>Thu, 24 Sep 2026 12:00:00 +0000</pubDate><description>Per hessenschau (24 Sep), KVV said unknown parties embedded malicious code in several of its websites, including kvvks.de, kvg.de, netzplusservice.de and...</description><category>breach</category></item><item><title>Kita platform in Verbandsgemeinde Otterbach-Otterberg: daycare file platform attacked, data encrypted</title><link>https://vulnpocalypse.dev/advisories/kita-platform-in-verbandsgemeinde-otterbach-otterberg-daycare-file/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/kita-platform-in-verbandsgemeinde-otterbach-otterberg-daycare-file/</guid><pubDate>Wed, 23 Sep 2026 12:00:00 +0000</pubDate><description>Rockland Radio reports (23 Sep), citing the Verbandsgemeinde, that a platform for daycare centres in two local municipalities was attacked.</description><category>breach</category></item><item><title>Universitaet Mannheim: chair&#x27;s server breached, attackers threaten to publish data</title><link>https://vulnpocalypse.dev/advisories/universitaet-mannheim-chairs-server-breached-attackers-threaten-to/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/universitaet-mannheim-chairs-server-breached-attackers-threaten-to/</guid><pubDate>Tue, 22 Sep 2026 12:00:00 +0000</pubDate><description>The university said on 22 Sep that unknown parties gained unauthorized access to a server of the Chair of Economic and Business Education, Learning, Design...</description><category>breach</category></item><item><title>Universitaet Bremen: zero-day attack on decentralised university systems</title><link>https://vulnpocalypse.dev/advisories/universitaet-bremen-zero-day-attack-on-decentralised-university/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/universitaet-bremen-zero-day-attack-on-decentralised-university/</guid><pubDate>Tue, 22 Sep 2026 12:00:00 +0000</pubDate><description>The university said on 22 Sep it was the target of a cyberattack that &quot;war eine solche Zero-Day-Attacke&quot; against decentralised facilities.</description><category>breach</category></item><item><title>Hotels, campsites and holiday rentals in Mecklenburg-Vorpommern: guest data stolen via booking portals and mailboxes</title><link>https://vulnpocalypse.dev/advisories/hotels-campsites-and-holiday-rentals-in-mecklenburg-vorpommern-guest/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/hotels-campsites-and-holiday-rentals-in-mecklenburg-vorpommern-guest/</guid><pubDate>Mon, 21 Sep 2026 12:00:00 +0000</pubDate><description>The state data protection commissioner (LfDI MV) said on 21 Sep it has received unusually many breach reports in recent weeks.</description><category>breach</category></item><item><title>Ludwig-Maximilians-Universitaet Muenchen: attacker accessed server with student data including bank data</title><link>https://vulnpocalypse.dev/advisories/ludwig-maximilians-universitaet-muenchen-attacker-accessed-server/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/ludwig-maximilians-universitaet-muenchen-attacker-accessed-server/</guid><pubDate>Sat, 19 Sep 2026 12:00:00 +0000</pubDate><description>LMU said (19 Sep) an unauthorized attacker gained access to a server and that it must assume the data was retrieved.</description><category>breach</category></item><item><title>Einheitsgemeinde Stadt Tangerhuette: attack on municipal IT, digital town hall offline</title><link>https://vulnpocalypse.dev/advisories/einheitsgemeinde-stadt-tangerhuette-attack-on-municipal-it-digital/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/einheitsgemeinde-stadt-tangerhuette-attack-on-municipal-it-digital/</guid><pubDate>Thu, 17 Sep 2026 12:00:00 +0000</pubDate><description>az-online reports (17 Sep), citing the municipality, that its IT infrastructure was the target of a security-relevant attack.</description><category>breach</category></item><item><title>Berlin state administration (two Senate departments): large volumes of files copied</title><link>https://vulnpocalypse.dev/advisories/berlin-state-administration-two-senate-departments-large-volumes-of/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/berlin-state-administration-two-senate-departments-large-volumes-of/</guid><pubDate>Fri, 14 Aug 2026 12:00:00 +0000</pubDate><description>Berlin&#x27;s data protection authority says attackers were active between 7 and 12 Aug 2026 in the networks of the Senate departments for Urban Development...</description><category>breach</category></item><item><title>unimed (German medical billing service provider): failed encryption attempt, billing-dispute data stolen affecting many hospitals&#x27; patients</title><link>https://vulnpocalypse.dev/advisories/unimed-german-medical-billing-service-provider-failed-encryption/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/unimed-german-medical-billing-service-provider-failed-encryption/</guid><pubDate>Fri, 22 May 2026 12:00:00 +0000</pubDate><description>unimed detected the attack on 14 Apr 2026; attackers tried and failed to encrypt systems but took data from a limited area, including billing-dispute...</description><category>breach</category></item><item><title>Mythos Preview unauthorized access through a third-party vendor environment</title><link>https://vulnpocalypse.dev/advisories/mythos-preview-unauthorized-access-through-a-third-party-vendor/</link><guid isPermaLink="false">https://vulnpocalypse.dev/advisories/mythos-preview-unauthorized-access-through-a-third-party-vendor/</guid><pubDate>Tue, 21 Apr 2026 12:00:00 +0000</pubDate><description>Bloomberg, about 21 Apr 2026: a private Discord group had used Mythos since roughly 7 Apr, through a contractor&#x27;s still-valid credentials and guessing of...</description><category>breach</category></item></channel></rss>
