Cyber Incident Victim: Saxony
Date:
Apr 2025
Location:
Germany
Summary
A Russian hacking group targeted the online presence of several German cities, including Dresden, Berlin and Nuremberg, aiming to disrupt services such as e‑parking permits and online appointment booking. During the attack the city’s website and related platforms experienced limited accessibility and delayed response times, though they remained reachable throughout the incident. Authorities reported that the intrusion was successfully repelled and normal operations resumed shortly afterward. The same group had previously been linked to a cyber incident affecting the city’s web services.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On the weekend a Russian hacker group launched a coordinated cyber attack targeting several German cities, including Dresden. The group’s objective was to disrupt the city’s online presence and block services such as e‑parking permits and online appointment scheduling. As a result, the website dresden.de experienced temporary limited accessibility. According to a statement from Dresden’s city hall, the attack was successfully repelled. Between 10 a.m. and 2 p.m. on Friday some applications on dresden.de showed a slightly delayed response time, although the pages and internet services remained continuously reachable. City officials confirmed that normal operation resumed after the incident.
Since Monday the city reported that all systems were functioning without problems. Federal cybersecurity authorities have linked the same Russian hacker group to a previous cyber attack on dresden.de that occurred in October 2023. The current assault also affected the municipal internet presences of other cities, notably Berlin and Nuremberg. No further disruption was reported after the weekend period. The city’s statement emphasized that the attack had been successfully defended. Thus, the incident concluded with no lasting impact on Dresden’s online services.