Landesregierung Mecklenburg-Vorpommern

Summary

A cyberattack targeted multiple government and police websites in Mecklenburg-Vorpommern, including ministerial pages, subordinate authorities' sites, the state police homepage, and a service portal. The assault involved overwhelming servers with mass requests to cause overload, detected by IT security experts from the state's data processing center and computer emergency team. Defensive measures proved effective, rendering the attacks largely unsuccessful. The responsible minister acknowledged the possibility of renewed attacks and maintained specialist teams on standby for immediate response if needed.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On August 17, 2023, IT security experts from the Mecklenburg-Vorpommern state government detected intensified cyberattacks targeting multiple official websites hosted on the state’s government portal. The attacks, first observed early Thursday morning, involved abnormally high volumes of requests directed at web servers managed by the state’s IT service provider, the Datenverarbeitungszentrum (DVZ) MV. Affected systems included websites belonging to state ministries, subordinate agencies, the public homepage of the Mecklenburg-Vorpommern State Police, and the MV-Serviceportal, all centrally maintained by DVZ MV. The state’s Computer Emergency Response Team (CERT M-V) collaborated with DVZ specialists to analyze the traffic patterns, quickly identifying the incident as a deliberate attempt to overwhelm servers through mass request floods—consistent with distributed denial-of-service (DDoS) attack methodologies. Security teams activated heightened alert protocols, mobilizing continuous monitoring and defensive measures throughout the morning hours. By early afternoon, authorities confirmed that existing security infrastructure successfully mitigated the attack vectors, preventing significant service disruptions or unauthorized access to sensitive systems. No data breaches or persistent compromises were reported across the targeted platforms.

State Interior Minister Christian Pegel characterized the incident as the largest recorded cyberattack against Mecklenburg-Vorpommern’s government web infrastructure to date, though he emphasized that defensive measures rendered the assault “largely ineffective.” Despite successful containment, Pegel warned that attackers might launch follow-on campaigns over the upcoming weekend, prompting CERT M-V and DVZ personnel to maintain 24/7 readiness for renewed incidents. The government did not disclose technical specifics of the mitigation measures or attribute responsibility for the attacks. Operational continuity was preserved across all affected portals, with no public service interruptions or collateral impacts reported beyond the initial surge in malicious traffic. Authorities concluded active incident response procedures by the evening of August 17 but sustained elevated monitoring levels due to the threat of subsequent offensive actions.

Sources

Sources available to members: 1 source.