CSIDB logo
Incident

Leymann Baustoffe

Incident posture

Attack window
Jun 2025
Location
Germany
Status
Unknown
CIA posture
Available to members
Updated
2026-07-18 07:36

Linked entities

Victim
Leymann Baustoffe
Threat actors
0 actors
Sources
2 sources

Timeline

Occurred
Jun 2025
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

Leymann-Baustoffe suffered a targeted criminal cyber‑attack that encrypted its IT systems, disrupting operations across its network of stores in Storkow, Beeskow, Eisenhüttenstadt and Frankfurt (Oder) as well as thirteen additional locations. The attack left the retailer reachable only by phone and e‑mail on a very limited basis, prompting customers to use known mobile contacts for urgent inquiries while the company works to restore full functionality and provides updates on its website.

Motives

Detailed motive labels are available to members.

0 motives

TTPs

Detailed technique labels are available to members.

1 technique

Description

On June 19, 2025, Leymann-Baustoffe announced that it had become the victim of a targeted criminal cyber-attack that resulted in the encryption of its IT systems. The attack was disclosed in a notice posted on the company's website and reported by local news outlets. According to the notice, the incident affected not only the company's primary location but also multiple branch locations. Specifically, the branches in Storkow, Beeskow, Eisenhüttenstadt and Frankfurt (Oder) were confirmed to be impacted. The statement also indicated that a total of fourteen locations, including the referenced branch and thirteen others, were involved in the incident. The disclosure came on the same day as the news article, indicating a timely public acknowledgment of the event.

In response to the encryption of its systems, Leymann-Baustoffe stated that it is working with high priority to restore operational capability. The company reported that telephone and email contact is currently very limited due to the ongoing impact on its IT infrastructure. For urgent inquiries, customers are advised to use the known mobile numbers of their individual contacts. The notice promised that detailed information would be made available on the website as soon as new developments occur. Leymann-Baustoffe expressed appreciation for customer understanding and patience while the recovery efforts continue. The notice concluded with a thank you to customers for their understanding and patience.

Sources

Sources available to members: 2 sources.

CSIDB