Cyber Incident Victim: Landkreis Dingolfing-Landau
Date:
Mar 2022
Location:
Germany
Summary
A cybersecurity incident affecting municipal IT systems prompted the temporary closure of a local government administrative center in Dingolfing, Bavaria, following the detection of an IT security breach over a weekend. To mitigate potential damage, authorities disconnected affected systems from the network and initiated a criminal investigation in coordination with law enforcement. The disruption necessitated a multi-day closure of the facility, suspending regular public services and requiring residents to use designated phone lines for urgent matters during this period.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 0 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
A cybersecurity incident occurred at the Rathaus (town hall) of Dingolfing, Bavaria, during the weekend of March 19-20, 2022. The municipality described the event as an "EDV-Sicherheitsvorfall" (IT security incident) affecting multiple administrative areas within the local government. Upon detection, officials took immediate containment measures by disconnecting affected systems from the network to prevent further damage. The incident prompted coordination with law enforcement agencies to investigate its origin and scope. As a direct consequence of these operational disruptions, the Rathaus announced a full closure starting Monday, March 21, 2022.
The closure remained in effect through Friday, March 25, 2022, suspending all in-person municipal services for five consecutive business days. During this period, citizens were instructed to contact the administration by telephone at 08731/501-0 exclusively for urgent matters, indicating degraded operational capabilities. No specific details regarding the incident's technical nature, data impact, or threat actor were disclosed publicly. The response focused on forensic investigation through collaboration with criminal authorities while maintaining essential communications channels. Service restoration timelines and specific affected systems were not elaborated in the available public statement.