Landespolizei Mecklenburg-Vorpommern

Summary

A suspected hacker attempt targeting the service smartphones of the Landespolizei Mecklenburg-Vorpommern via the network server that links these devices has prompted investigations and analyses on the computers that manage and protect the phones. As a result, the mPol mobile police handsets cannot be fully utilized for several days, forcing officers to revert to radio‑based requests for vehicle registration, identification checks and other inquiries while the smartphones remain usable for voice calls. The state data protection commissioner has been notified and an investigative procedure has been launched.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On June 1, 2025, a press release from the Mecklenburg-Vorpommern government reported an attempted hacker attack on the service smartphones of the Landespolizei Mecklenburg-Vorpommern. The attack was directed at the server that interconnects these police smartphones. In response, investigations and analyses have been launched on the computer servers that manage and safeguard the devices against such threats. The state commissioner for data protection and freedom of information Mecklenburg-Vorpommern has been notified and an investigative procedure has been opened.

As a result of the ongoing examinations, the mPol (mobile police) smartphones used by officers in patrol duty cannot be employed to their full capacity for several days. Normally, these devices enable online queries for vehicle registration details, verification of identification documents, and additional research while officers are on patrol. Because the online query function is currently unavailable, officers must revert to the pre‑mPol process of transmitting a license plate number by radio to the police station. At the station, staff retrieve the requested information using a desktop computer and send the answer back to the officer via radio.

The telephony capability of the service smartphones remains operational and can still be used for voice calls during the restriction period. The limitation on the mPol devices is described as temporary, lasting only for the duration of the investigations. No further details about the attacker, the method of intrusion, or the outcome of the analyses are provided in the source material. The situation is being monitored while the investigative authorities continue their work on the affected servers.

Sources

Sources available to members: 1 source.