CSIDB logo
Incident

Gemeinde Hoppegarten

Incident posture

Attack window
Aug 2025
Location
Germany
Status
Ongoing
CIA posture
Available to members
Updated
2026-08-17 19:33

Linked entities

Victim
Gemeinde Hoppegarten
Threat actors
0 actors
Sources
1 source

Timeline

Occurred
Undetermined
Discovered
Undetermined
Disclosed
Sep 2025
Resolved
Pending

Summary

The municipality of Hoppegarten suffered a cyber attack that disrupted its IT infrastructure and hindered communication with schools and childcare facilities. Telephone and email access to the central administration has been restored, and resident registration services are operational again, though occasional interruptions may occur. Exchange with subordinate institutions via the state administrative network remains pending pending clearance from the central IT service provider. The State Criminal Investigation Office of Brandenburg continues to lead the investigation, maintaining regular information exchanges, while safeguarding data remains the highest priority.

Motives

Detailed motive labels are available to members.

0 motives

TTPs

Detailed technique labels are available to members.

1 technique

Description

The municipality of Hoppegarten reported that the aftermath of a cyber attack was still being processed as of 22 September 2025. The administration continued efforts to restore IT services to full availability. Telephone and email access to the core administration had been restored. Communication with subordinate facilities such as schools and kindergartens remained disrupted. Starting on Monday, 22 September 2025, the residents' registration office announced that its citizen services would be available again. The administration expected all services in that area to be functioning normally. It asked citizens to excuse any possible short‑term disturbances in daily operations and thanked them for their understanding.

The release of the communication channel via the state administrative network to other state authorities could only resume after approval from the central IT service provider of Brandenburg. The evaluation by that public authority was still pending at the time of the statement. Investigations into the attack were being conducted continuously by the State Criminal Police Office (LKA) of Brandenburg. A regular exchange of information between the municipality and the LKA was ensured. Protecting data remained the highest priority in the ongoing response. The municipality concluded by reiterating its request for public patience while it worked to fully normalize operations.

Sources

Sources available to members: 1 source.

CSIDB