Cyberattack on Leipzig Municipal IT Provider Steals Internal Directory Data

Summary

Leipzig says its IT provider Lecos detected and stopped a cyberattack before systems went down. Attackers reportedly stole internal contact and technical directory data; employee and public data were not affected. Investigations are ongoing.

Key points

• Leipzig’s IT provider Lecos was targeted in a criminal cyberattack.
• The city said the attack was detected and stopped in time to prevent system outages.
• Attackers reportedly obtained business contact and technical directory data from municipal departments and affiliated cultural and public-service organizations.
• The stolen data reportedly included internal technical component names, such as device numbers.
• According to the city, employee contact details, residents’ data, data from municipal administrative systems, and data held by other municipal companies were not affected.
• The State Criminal Police Office and relevant state and federal authorities were notified, and investigations are underway.