Cyber Incident Victim: FAKO-MGetränke GmbH & Co. KG
Date:
Apr 2025
Location:
Germany
Summary
The beverage wholesaler FAKO-M Getränke GmbH & Co. KG suffered a cyberattack that rendered its IT infrastructure at the Neuss, Bocholt and Hamm sites unavailable overnight. The State Criminal Police Office and relevant security authorities were notified and are assisting with the investigation while the company continues operations in an emergency mode. Customers can obtain current ordering and contact information via the website, and managing director Mr. Siebigteroth stated that staff are working to deliver ordered goods manually despite the system outage. Orders through the B2B and B2C shop platforms remain possible and the company can be reached by phone.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 2 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On the night of April 12‑13, 2025, FAKO‑M Getränke GmbH & Co. KG experienced a cyberattack that rendered its entire IT infrastructure unavailable at the three sites in Neuss, Bocholt, and Hamm. The company, which had acquired the Getränke Hornung Group in the Mussum Industrial Park at the turn of 2018/2019, reported that all systems supporting its beverage wholesale operations were offline. A statement from the firm indicated that the incident occurred during the early morning hours and that the disruption affected all digital services across the locations.
Immediately after discovering the outage, FAKO‑M notified the State Criminal Police Office (LKA) and the relevant security authorities, who began assisting with the investigation. In parallel, the firm activated an emergency operation to keep business running despite the lack of IT systems. Managing Director Mr. Siebigteroth explained that employees were processing and delivering orders manually to fulfill customer demand. The company also confirmed that its B2B and B2C online shop systems remained functional, allowing customers to place orders through those channels, and that the corporate telephone line at +49 2131 934‑0 was restored for direct contact. Information about current ordering procedures and contact options was made available on the company’s website.
As a result of the emergency measures, FAKO‑M continued to supply goods through manual handling while maintaining online order capability and telephone accessibility. The firm expressed appreciation for customer understanding and stated its intention to resume normal operations as soon as the IT infrastructure could be restored. Updates on the recovery process and any changes to service availability were to be communicated via the same website channel.