Cyber Incident Victim: Reutlinger General-Anzeiger
Date:
Nov 2025
Location:
Germany
Summary
The website of the Reutlinger General-Anzeiger was compromised via a vulnerability, allowing unauthorized access to usernames and email addresses. Although no legal obligation to disclose existed, the operator chose to inform users promptly, closed the vulnerability, notified the relevant Baden-Württemberg authorities, and launched an investigation while apologizing for the inconvenience. Users were advised to remain vigilant for suspicious messages and could contact the data protection officer at [email protected] for questions.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On May 1, 2025, the Reutlinger General-Anzeiger published a notice on its website informing users of a cyber incident affecting the gea.de domain. The notice stated that an unidentified vulnerability on the website had been exploited, allowing unknown actors to view and possibly copy usernames and email addresses of registered users. Upon discovering the vulnerability, the newspaper’s technical team immediately closed the security gap to prevent further unauthorized access. The incident was identified through internal monitoring that detected unusual access patterns on the web server. No other personal data, such as passwords or payment information, was mentioned as being compromised in the notice.
After securing the website, the Reutlinger General-Anzeiger notified the relevant data protection and law‑enforcement authorities in Baden‑Württemberg and began cooperating with their investigation. The organization appointed its data protection officer, reachable at [email protected], to handle inquiries related to the breach. Management expressed regret for the inconvenience caused to users and affirmed that work is underway to determine the full scope of the attack and to strengthen the website’s security measures. The newspaper also engaged external cybersecurity specialists to conduct a forensic analysis of the affected systems. The notice indicated that steps are being taken to prevent similar incidents in the future.