Cyberattack Disrupts Services in Germany’s Rhein-Nahe Municipality
Summary
A cyberattack discovered July 16 disrupted public and financial services and email access in Rhein-Nahe. The mayor said attackers demanded a ransom, no data loss was known, and payments had resumed.
Key points
- The Rhein-Nahe administration was locked out of its own systems after an attack discovered on July 16, according to Mayor Benedikt Seemann.
- Citizen services, parts of the finance department, and municipal email were disrupted, delaying appointments and applications.
- Specialists reportedly found IP-address indicators of access from Russia and other European countries; the mayor said the attack came from outside.
- The mayor said attackers left a statement and ransom demand in accessible data, and that no data had been lost so far.
- The municipality had resumed payments, including benefits for refugees and social assistance, while other services remained restricted.
- Seemann estimated response costs in the mid-to-high five figures and expected recovery to take several more days.
Article Details
- Victim Organization
- Verbandsgemeinde Rhein-Nahe
- Incident Type
- Cyberattack that locked the administration out of its own system; the mayor said the attackers sought to extort money and left a ransom demand.
- Operational Impact
- Citizen services and parts of the finance administration were restricted, and the municipality could not be reached by email. Payments were later restored, but full system recovery was expected to take several more days.
- Ransom Or Extortion
- According to Mayor Benedikt Seemann, the attackers left a message with contact details and a ransom demand in data that remained accessible. No ransom amount or payment was reported.
- Claim Status
- confirmed