Cyber Incident Victim: Stadt Bad Tölz
Date:
Nov 2025
Location:
Germany
Summary
Hackers had taken over the Instagram channel of the city Bad Tölz. The ensuing suspension could not be reversed, forcing the city to establish a new account. Prior to the incident, the city had been a popular destination for photo sharing on the platform, ranking highly among German small towns according to a travel portal survey. The loss of the original account required rebuilding its social‑media presence from scratch.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
Before the incident, the city of Bad Tölz was noted as a popular destination on Instagram according to a Travelcircus statistic that ranked it among German small towns with the most shared photos. The city maintained its own Instagram channel through the Tourist-Info office to showcase local attractions and events. At the beginning of the year, hackers gained unauthorized access to the city's official Instagram account. Upon discovering the breach, the city initiated a suspension of the compromised Instagram channel. The suspension was intended to prevent further misuse while the situation was assessed.
Subsequent investigation revealed that the suspension of the hacked Instagram account could not be reversed or restored to the city's control. Because the original channel could not be recovered, the city determined that there was no alternative but to abandon it entirely. Consequently, the city of Bad Tölz created a completely new Instagram account to replace the lost one. The new channel had to be built from scratch, starting with zero followers and no prior content. This forced the municipality to begin its Instagram presence anew, losing the accumulated audience and history of the previous account.