Cyber Incident Victim: Klauser GmbH & Co KG
Date:
Apr 2024
Location:
Germany
Summary
The company experienced a cyberattack that forced a controlled shutdown of its IT systems, disrupting online sales operations and causing supply chain issues in physical stores while they remained open. Internal and external recovery efforts restored critical business processes, though the online store remained inoperable; no data exfiltration was confirmed and no ransomware group claimed responsibility for the incident.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 3 motives | 7 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On April 19, 2024, Klauser GmbH & Co KG, operator of the Salamander shoe retail chain, experienced a cyberattack that forced the company to deliberately shut down its internal IT systems and major portions of its online presence. The attack rendered Salamander’s e-commerce platform inaccessible, replacing it with an apology page citing "technical reasons" for the outage. Physical retail operations across over sixty Salamander stores were also disrupted, with at least one Hanover location reporting supply chain complications by April 26, though all stores remained open. Klauser confirmed the incident through an official statement, attributing the shutdown to defensive measures against unauthorized system access. The company mobilized internal and external resources to restore critical business functions, achieving partial recovery of core operational processes by late April. However, the online store remained nonfunctional as of the last reported update.
The attack caused sustained operational impairment to Salamander’s sales infrastructure, with no public evidence confirming data exfiltration or encryption-based extortion. Klauser’s communications emphasized no indication of compromised customer or corporate data as of their latest assessment. No ransomware group had claimed responsibility for the intrusion at the time of reporting, leaving the attack’s exact nature unverified. Incident recovery efforts prioritized business continuity over full digital restoration, reflecting the attack’s systemic impact on both digital and physical operations. Separately, Salamander’s former mascot "Lurchi" and associated intellectual property remained unaffected due to a preexisting licensing agreement with footwear retailer Supremo finalized during Salamander’s 2023 restructuring.