Cyber Incident Victim: Gemeinde Maria Enzersdorf
Date:
Mar 2025
Location:
Austria
Summary
Gemeinde Maria Enzersdorf experienced a hacker attack on its server that severely limited its IT operations while analog services such as citizen services, the works yard and kindergartens remained operational. Specialist IT firms were engaged to resolve the issue, and security authorities and the data protection officer were involved in the response. The municipality reported that the incident was detected quickly, allowing a prompt reaction, but further details could not be disclosed for investigative reasons.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 2 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
In the night of 25 to 26 March 2025, the market town of Maria Enzersdorf was targeted by a hacker attack on its IT systems. By the morning of 27 March 2025, the municipal IT operation remained heavily restricted. Specialist IT security firms were engaged to work on resolving the issue. The local security authorities and the municipal data protection officer were also involved in the response. The press spokeswoman Heide Weyss confirmed that efforts to restore normal operation were underway.
Despite the IT disruption, all analog services of the municipality continued to operate without interruption. These included the citizen service at the town hall, the municipal works yard, and the local kindergartens. The municipal council meeting held on 26 March 2025 proceeded as scheduled, although digital aids such as presentations could not be used. The administration reported that the attack was detected promptly, allowing a rapid initial reaction. No further technical details about the attack vector or compromised data were disclosed at that time.
The municipality stated that it continued to prioritize and process urgent citizen requests using non‑digital means. Ongoing coordination with the involved security firms and authorities aimed to contain and remediate the incident. Additional information was withheld pending the investigation, as noted by the press spokeswoman for tactical reasons.