Roth Group Says Servers Were Encrypted in May Cyberattack
Summary
Roth Group says its servers at German sites were encrypted on 8 May 2026; its core SAP system was unaffected. Key systems and communications are operational again, while investigations continue.
Key points
- Roth Group says its IT systems at German sites were targeted and its servers encrypted on 8 May 2026.
- The company says its core SAP ERP system was not affected.
- Roth Group brought in external IT forensics and security experts and informed the relevant authorities.
- The company says key systems and communication channels are operational again; investigations and security improvements continue.
- Roth Group advises vigilance for suspicious contacts and careful verification of payment requests or changes to bank details through known channels.
Article Details
- Victim Organization
- Roth Group
- Victim Domain
- roth-industries.com
- Incident Type
- Cyber attack involving encryption of the victim's servers
- Incident Date
- 2026-05-08
- Operational Impact
- The servers were encrypted. The victim reports that key systems and communication channels are now operational again; its core ERP system, SAP, was not affected.
- Claim Status
- confirmed