Cyber Incident Victim: Bavaria
Timeline
Summary
A cyberattack targeted a law firm in Bayreuth, Bavaria, disrupting its technical infrastructure and rendering digital services inoperable, including access to client files, email communications, and document retrieval. The firm relied on parallel paper-based record-keeping to maintain court operations despite the disruption. While affiliated entities within the same business partnership remained unaffected, the extent of potential sensitive data compromise remained unclear. Law enforcement initiated an investigation into the incident.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 4 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
A cyber incident impacted the Bayreuth-based law firm "Henker, Görner & Partner" on or around December 4, 2022, with disruptions becoming apparent on December 5. The attack compromised significant portions of the firm's technical infrastructure, rendering digital services inoperable. Affected systems included access to digital client files, email communications, and document retrieval platforms, severely hindering daily operations. The firm, comprising seven lawyers and additional staff, relied heavily on its digital infrastructure but maintained parallel paper-based recordkeeping, which allowed continuation of critical court appointments. The incident exclusively targeted the legal practice within the broader "Rosenschon Partnerschaft" organization, leaving its affiliated tax advisory and business consulting services unaffected.
Law enforcement initiated an investigation following the incident’s discovery, though no public statements regarding attribution or technical specifics were released by authorities or the firm as of the reporting period. Michael Brand, a lawyer at the firm, confirmed the cyberattack but emphasized the inability to determine whether sensitive client data had been exfiltrated. The firm’s reliance on offline records mitigated operational paralysis, enabling adherence to legal obligations despite digital incapacitation. Recovery efforts and forensic analyses were underway, though no timeline for full restoration of digital services was disclosed. The incident underscored localized disruption without cascading effects on associated entities under the Rosenschon umbrella.