Cyber Incident Victim: guenstiger.de
Date:
Apr 2025
Location:
Germany
Summary
A ransomware attack forcedthe price comparison portal guenstiger.de to shut down all its systems and disconnect them from the internet to halt the spread of the malware. Data were encrypted, resulting in data losses and causing technical restrictions on the website and in communications with users, including missing information in price tables and delayed loading of product images. The company informed its business customers directly and posted updates on LinkedIn, while also notifying the Hamburg data protection authority about the incident.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
Inthe night leading up to April 23 2025, the price‑comparison portal guenstiger.de experienced a ransomware incident at its Hamburg location, during which data on its systems were encrypted. Upon discovering the attack, the company’s IT team immediately disconnected all affected systems from the internet and shut down the data center in an effort to halt further propagation of the malware. The shutdown was carried out as a precautionary measure to contain the incident and prevent additional systems from being compromised. At that point, guenstiger.de had not yet been able to determine the full scope or scale of the encryption.
The ransomware encryption resulted in data losses that caused noticeable technical restrictions on the guenstiger.de website and in its communication channels. Visitors to the site observed missing data in the price tables that are embedded in heise online articles and on other partner sites, while product images loaded only with delay. These symptoms were described by the company as direct consequences of the attack, reflecting the impact of the encrypted data on the platform’s functionality. No further details about the specific types of data lost or the exact volume of affected records were provided in the source.
In response to the incident, guenstiger.de informed its business customers as comprehensively as possible, using direct communication and posts on LinkedIn to raise awareness. The Hamburg data protection officer, Thomas Fuchs, was also notified of the event. The company’s managing director, Harald Schiffauer, acknowledged that data losses had occurred and that the resulting technical limitations were affecting both the website and interactions with users. The article notes that the full extent and scope of the ransomware attack remained undetermined at the time of reporting.