Reutlinger General-Anzeiger
Incident posture
Linked entities
- Victim
- Reutlinger General-Anzeiger
- Threat actors
- 0 actors
- Sources
- 1 source
Timeline
Summary
The Reutlinger General-Anzeiger’s website was infiltrated through a security vulnerability that allowed unknown actors to view and possibly extract user names and email addresses. Upon discovery, the vulnerability was promptly patched and the incident was reported to the relevant Baden‑Württemberg authorities. The organization stated that no legal obligation to disclose existed but chose to inform users openly. A data protection officer was made available for further inquiries.
Motives
Detailed motive labels are available to members.
TTPs
Detailed technique labels are available to members.
Description
On May 1, 2025, the Reutlinger General-Anzeiger published a notice informing readers that a vulnerability had been discovered on its website www.gea.de. According to the notice, unknown actors exploited the vulnerability to view and possibly extract usernames and email addresses of users. The organization stated that the breach was identified after the vulnerability became known. No further technical details about the flaw were provided in the notice.
Following the discovery, the vulnerability was immediately closed to prevent further unauthorized access. The Reutlinger General-Anzeiger reported that it had initiated and completed the necessary steps with the competent authorities in Baden‑Württemberg. The organization emphasized that it acted promptly despite there being no legal obligation to disclose the incident. It also mentioned that it was working to clarify the background of the attack.
In the notice, users were advised to be especially vigilant for possible fraudulent emails purporting to come from the newspaper and to contact the office by telephone if they were unsure about the authenticity of a message. The Reutlinger General-Anzeiger apologized for any inconvenience caused and said it was working intensively to increase security and restore trust. Readers were directed to direct any questions to the data protection officer via email at [email protected].
Sources
Sources available to members: 1 source.