Ransomware Attack Disrupts Wagerenhof Foundation Systems; Possible Data Leak Under Investigation
Summary
The Wagerenhof Foundation says attackers encrypted data and disrupted systems on July 9. It rejected a ransom demand, suspects a data leak, and is investigating its scope; recovery timing is unknown.
Key points
- The foundation said the attack on its virtual IT environment occurred on the evening of July 9; attackers blocked access to several systems and encrypted data.
- A ransom demand was received, but the foundation says it will not pay.
- The foundation disconnected systems and communications to limit possible data leakage and brought in external IT and cybersecurity specialists and police.
- Servers, applications, documentation, landline telephony, and email are currently unavailable; the timeline for restoring normal service is unknown.
- The foundation believes a data leak may have occurred, but the affected data and scale are still unclear while a forensic investigation proceeds.
- The foundation said residents’ basic care, medical support, and safety were not endangered.
Article Details
- Victim Organization
- Stiftung Wagerenhof
- Incident Type
- Ransomware attack involving disruption of IT systems and data encryption
- Operational Impact
- Access to multiple systems was blocked and data was encrypted. The foundation took its systems and connections offline; servers, applications, documentation, landline telephony, and email were unavailable. Operations continued with alternative arrangements and some payment restrictions. The foundation said residents’ and employees’ basic care, medical support, and safety were not endangered.
- Ransom Or Extortion
- A ransom demand was received in a purported claim of responsibility. The foundation said it would not pay. A data leak is considered likely by the foundation, but the affected data and extent were unknown pending forensic investigation.
- Claim Status
- confirmed