Cyber Incident Victim: Frankfurter Entsorgungs- und Service GmbH
Date:
Jun 2022
Location:
Germany
Summary
The Frankfurter Entsorgungs- und Service GmbH was impacted by a cyberattack on a Darmstadt-based IT service provider that it uses, prompting the company to isolate all connected servers and cut the link to the provider as a precaution. While customer data remained unaffected and core services such as waste collection, street cleaning and the waste-to-energy plant continued without interruption, the online bulk‑waste ordering system and the customer portal were disabled, forcing customers to place orders via email, fax or telephone. The company warned that commercial services could experience delays until the provider restores operations, noting that it is prepared for such incidents and that the duration of the disruption depends on when the Darmstadt data center resumes normal service.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 5 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On Sunday, June 12, 2022, reports emerged of an IT‑attack targeting a Darmstadt‑based data‑center operator that provides services to several regional companies. The attack became publicly known after the Darmstadt energy provider Entega disclosed that it had been victimized by a hacker incident affecting its employee email accounts and corporate websites. Subsequent statements from the city of Frankfurt confirmed that the Frankfurter Entsorgungs‑ und Service‑Gruppe (FES) was also impacted because it relies on the same IT‑service provider. The news was disseminated through FES’s own press release and regional media outlets on the same day.
In response to the incident, FES enacted precautionary measures by disconnecting all servers that were linked to the compromised service provider from its network and severing the connection to the provider entirely. The company emphasized that these actions were taken as a safeguard and that, according to its current assessment, no customer data had been compromised. FES also noted that it had prepared for such scenarios and maintained the ability to remain reachable by its customers and partners throughout the disruption.
The immediate operational impact of the disconnection was limited to specific digital services: the online registration system for new bulky waste orders and the customer portal KundenPlus became unavailable. Consequently, FES instructed customers to place orders exclusively via email, fax, or telephone. While municipal waste collection, street cleaning, and the operation of the waste incineration plant (MHKW) continued without restriction, the company warned that the reliance on alternative communication channels could lead to delays in commercial services over the following days. No interruption was reported for essential waste‑management facilities or other core infrastructure.
FES indicated that the duration of the restrictions would depend on when the Darmstadt data‑center operator could restore its normal operations, with expectations that the situation might persist at least until the end of the week. The same IT‑service provider was also used by Mainzer Stadtwerke, which reported comparable disruptions to its websites, internal email servers, and certain public facilities, while affirming that its separately protected critical infrastructure for electricity, gas, and water remained unaffected. Statements from both FES and the involved service providers stressed that the incident was being managed through existing contingency plans and that updates would be provided as the provider’s recovery progressed.