CSIDB logo
Incident

Saxony

Incident posture

Attack window
Apr 2025
Location
Germany
Status
Unknown
CIA posture
Available to members
Updated
2026-05-04 04:00

Linked entities

Victim
Saxony
Threat actors
0 actors
Sources
1 source

Timeline

Occurred
Apr 2025
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

A Russian hacking group targeted the online presence of several German cities, including Dresden, Berlin and Nuremberg, aiming to disrupt services such as e‑parking permits and online appointment booking. During the attack the city’s website and related platforms experienced limited accessibility and delayed response times, though they remained reachable throughout the incident. Authorities reported that the intrusion was successfully repelled and normal operations resumed shortly afterward. The same group had previously been linked to a cyber incident affecting the city’s web services.

Motives

Detailed motive labels are available to members.

1 motive

TTPs

Detailed technique labels are available to members.

1 technique

Description

On the weekend a Russian hacker group launched a coordinated cyber attack targeting several German cities, including Dresden. The group’s objective was to disrupt the city’s online presence and block services such as e‑parking permits and online appointment scheduling. As a result, the website dresden.de experienced temporary limited accessibility. According to a statement from Dresden’s city hall, the attack was successfully repelled. Between 10 a.m. and 2 p.m. on Friday some applications on dresden.de showed a slightly delayed response time, although the pages and internet services remained continuously reachable. City officials confirmed that normal operation resumed after the incident.

Since Monday the city reported that all systems were functioning without problems. Federal cybersecurity authorities have linked the same Russian hacker group to a previous cyber attack on dresden.de that occurred in October 2023. The current assault also affected the municipal internet presences of other cities, notably Berlin and Nuremberg. No further disruption was reported after the weekend period. The city’s statement emphasized that the attack had been successfully defended. Thus, the incident concluded with no lasting impact on Dresden’s online services.

Sources

Sources available to members: 1 source.

CSIDB