CSIDB logo
Incident

Stadt Bad Tölz

Incident posture

Attack window
Nov 2025
Location
Germany
Status
Unknown
CIA posture
Available to members
Updated
2026-08-13 02:07

Linked entities

Victim
Stadt Bad Tölz
Threat actors
0 actors
Sources
1 source

Timeline

Occurred
2025
Discovered
Undetermined
Disclosed
Jun 2025
Resolved
Pending

Summary

Bad Tölz experienced a hacker takeover of its official Instagram account, after which the city was unable to regain control of the compromised channel. Consequently, officials decided to abandon the hijacked account and launch a new Instagram profile from scratch. Prior to the incident, the municipality had been noted for strong engagement on the platform, ranking highly among German small towns in a Travelcircus survey of shared photos. The loss of the original feed forced the town to rebuild its social‑media presence without access to its previous follower base or content.

Motives

Detailed motive labels are available to members.

0 motives

TTPs

Detailed technique labels are available to members.

1 technique

Description

Before the incident, the city of Bad Tölz maintained an active Instagram account that was used by the Tourist‑Info to share images and promote local attractions. The account had garnered a substantial following and was noted for its high engagement among users. A 2024 statistic from the travel portal Travelcircus ranked Bad Tölz among the top German small towns whose photos were frequently shared on Instagram. This presence contributed to the town’s reputation as a popular destination in social media.

At the beginning of the year, unidentified hackers gained unauthorized access to the city’s official Instagram channel and took control of the account. The compromise was detected by the city’s social media team after observing unusual activity and unauthorized posts. In response, the city immediately initiated a suspension of the compromised account to prevent further misuse. Despite efforts to recover the original account, the suspension could not be reversed, leaving the channel inaccessible.

As a result, the city lost access to its established follower base and the historical content that had been accumulated over time. To continue its online communication, the administration decided to create a completely new Instagram account from scratch. The new channel required rebuilding the audience and re‑establishing the town’s visual presence on the platform. The city now operates the new Instagram profile while the original account remains unavailable.

Sources

Sources available to members: 1 source.

CSIDB