Cyber Incident Victim: Hamburg, Germany
Date:
Dec 2022
Location:
Germany
Summary
A cyberattack targeted Hamburg's municipal cemetery and crematorium operators, disrupting IT systems and encrypting critical files. The incident severely limited internal communications via email and telephone, disabled electronic gate locking mechanisms, and forced cemetery barriers to remain open. While funeral services continued without direct customer impact, operational delays occurred in information requests. Authorities confirmed no data theft but engaged external specialists for recovery efforts expected to span weeks, with law enforcement investigating the attack.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On December 19, 2022, hackers launched a cyberattack targeting IT infrastructure operated by Hamburger Friedhöfe AöR and Hamburger Krematorium GmbH, disrupting cemetery and crematorium services across four locations in Hamburg, Germany: Ohlsdorf, Öjendorf, Volksdorf, and Wohldorf. The attackers encrypted critical files and paralyzed multiple IT systems, severely limiting internal email and telephone communications. Electronic locking mechanisms controlling cemetery gates malfunctioned, forcing the Ohlsdorf vehicle barrier to remain open to prevent access issues. Operational impacts extended to cremation facilities in Ohlsdorf and Öjendorf managed by Hamburger Krematorium GmbH. Cemetery spokesman Lutz Rehkopf confirmed the attack’s immediate consequences but emphasized that funeral services proceeded without cancellation despite potential telephone inquiry delays. No evidence indicated theft of customer or mourner data during the incident.
Hamburger Friedhöfe engaged external cybersecurity specialists to restore systems, though full recovery was projected to take weeks due to the encryption’s severity. The organization maintained public operations by keeping cemetery gates accessible and assuring customers of uninterrupted funeral arrangements. Hamburg police initiated a criminal investigation into the attack’s origins and perpetrators, but no attribution or ransom demands were disclosed publicly. While IT disruptions persisted, the cemeteries implemented contingency measures to minimize visitor impact, prioritizing the functionality of burial and cremation services throughout the incident response period.