Cyber Incident Victim: Schachbezirk Düsseldorf e.V.
Date:
May 2022
Location:
Germany
Summary
The Schachbezirk Düsseldorf experienced a cyberattack targeting its NRW chess results portal server, causing service disruption. The league manager initiated manual collection of match results via email, planning to enter them once the portal was restored and temporarily publishing outcomes on the district homepage. Affected clubs were notified through email communications to mitigate the operational impact during the outage.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On or around May 15, 2022, the NRW-Ergebnisportal (nrw.svw.info), a server supporting chess competition results for the Schachbezirk Düsseldorf district, experienced a disruption due to a confirmed cyberattack. The attack rendered the portal inoperable, directly impacting the ability of chess clubs and officials to submit or access match results through the system. Marcel Harff, the Second Competition Manager (2.Spielleiter), publicly acknowledged the incident on the district's website on May 15, 2022, at 21:04, confirming the server was compromised and attributing the outage to hostile cyber activity. The disruption occurred during the competitive season, creating immediate operational challenges for recording and verifying match outcomes across participating clubs. No technical details regarding the attack vector, attacker identity, or specific malware involved were disclosed in the public statement. The primary immediate consequence was the unavailability of the centralized results portal, forcing reliance on alternative communication and record-keeping methods.
In response to the outage, Marcel Harff implemented a manual contingency process to mitigate the disruption to league operations. He directly solicited match results from team leaders and club officials via email, bypassing the compromised portal entirely. Harff committed to entering all manually collected results into the NRW-Ergebnisportal once service was restored, ensuring eventual data consistency in the official system. As an interim transparency measure, he offered to publish received match results on the Schachbezirk Düsseldorf district homepage, maintaining some level of public access to competition outcomes despite the portal's downtime. Harff also proactively communicated the incident and these alternative procedures to all affiliated clubs via email, standardizing the response across the district and reducing potential confusion. The incident required manual administrative intervention to sustain competition integrity until technical recovery of the primary system could be completed. No restoration timeline or technical remediation details were provided in the initial public notification.