Cyber Incident Victim: Deutsches Meeresmuseum
Date:
Mar 2024
Location:
Germany
Summary
The German Maritime Museum experienced a cyberattack overnight, disrupting its online ticket sales and inquiry systems. The institution's Ozeaneum and Natureum facilities remain open during regular hours, with admission currently limited to on-site cash purchases, though pre-purchased tickets remain valid. Online services are unavailable, but telephone assistance is operational during business hours.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
The German Maritime Museum (Deutsches Meeresmuseum) in Stralsund, Mecklenburg-Vorpommern, experienced a cyber attack during the night of March 14, 2024. The institution publicly disclosed the incident on March 15, 2024, through official communications channels. The attack disrupted multiple digital services, with the museum confirming its online ticket sales platform became immediately inaccessible following the intrusion. This forced the temporary suspension of all electronic ticket purchases across affected museum facilities. Physical access to the OZEANEUM and NATUREUM exhibition sites remained unaffected, with both locations maintaining regular operating hours throughout the incident.
Immediate operational adjustments included restricting ticket sales exclusively to on-site cash transactions at museum box offices. Visitors holding pre-purchased admission tickets, coupons, or annual passes retained uninterrupted access to museum facilities. The cyber attack additionally disabled the museum's capacity to process online inquiries submitted through digital channels. To address visitor concerns, the institution established an information telephone line operational Monday through Friday from 10:00 AM to 4:00 PM local time. Technical recovery efforts focused on restoring the compromised online ticket portal and inquiry management systems, though no restoration timeline was provided in initial communications. The museum's public statements confirmed the cyber attack's occurrence but did not specify intrusion methods, data compromise, or attribution details.