Ransomware Attack Disrupts Sprendlingen-Gensingen Municipal Systems

Summary
Sprendlingen-Gensingen says its municipal administration and utilities were targeted in a ransomware attack on April 16. Systems were taken offline; forensic investigators are examining the access method and affected data, and personal-data theft remains unclear.
Key points
- The municipality says its administration and utilities were targeted in a ransomware attack on April 16, 2026.
- The administration took all systems offline, leaving its applications unavailable.
- A BSI-certified external forensic team began investigating on April 17, including how attackers gained access and which data were affected.
- It remains unclear whether personal data were stolen; the municipality says affected individuals would be notified directly.
- Limited service at the registry and civil status offices was planned for April 22, with further systems expected to return later.
Article Details
- Victim Organization
- Verbandsgemeindeverwaltung and Verbandsgemeindewerke Sprendlingen-Gensingen
- Incident Type
- Ransomware attack
- Incident Date
- 2026-04-16
- Disclosure Date
- 2026-04-21
- Operational Impact
- The administration took all systems offline, making administrative applications unavailable. The administration was closed on April 21, with limited emergency service and a planned gradual resumption of some functions. Regular telephone numbers and email addresses remained unavailable.
- Claim Status
- confirmed
