Mülheim Says Attackers Exploited Remote-Access Software Vulnerability; No Data Stolen
Summary
Mülheim says attackers exploited a vulnerability in its remote-access software. The city disabled and rebuilt the system, closed the vulnerability and changed local passwords; it says logs show no data theft or access to other systems. The Allris outage was unrelated.
Key points
- The city said attackers exploited a vulnerability in widely used remote-access software, which Mülheim used for home office and IT maintenance.
- Mülheim says it immediately disabled access to the affected software, checked and rebuilt the system, closed the vulnerability and changed local passwords.
- The city says no data was taken, no citizen or employee data was stored on the affected system, and logs confirmed no access to other municipal systems.
- Mülheim says the Allris council information system outage was caused by an unrelated technical issue, contrary to the initial report linking it to the attack.
- The affected system is under heightened monitoring; further technical measures are being considered after the incident is fully reviewed.
Article Details
- Victim Organization
- Mülheim city administration
- Incident Type
- Security incident involving a remote-access solution; the city said it blocked access, checked and rebuilt the affected system, and closed the vulnerabilities. The reported Allris outage was unrelated.
- Disclosure Date
- 2026-07-14
- Operational Impact
- The remote-access solution was blocked and its system rebuilt. The city said other systems continued to operate normally. The reported half-hour Allris outage was attributed to a separate technical cause.
- Claim Status
- confirmed