CSIDB logo
Incident

Stadt Stuttgart

Incident posture

Attack window
Apr 2025
Location
Germany
Status
Unknown
CIA posture
Available to members
Updated
2026-02-18 02:40

Linked entities

Victim
Stadt Stuttgart
Threat actors
0 actors
Sources
1 source

Timeline

Occurred
Apr 2025
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

The Stuttgart city administration website experienced intermittent unavailability due to a cyber attack identified as a DDoS incident. This involved overwhelming the site's servers with excessive traffic, prompting a temporary precautionary shutdown before partial restoration. While the city administration worked to ensure consistent accessibility, other municipal systems remained unaffected and functional throughout the event.

Motives

Detailed motive labels are available to members.

2 motives

TTPs

Detailed technique labels are available to members.

1 technique

Description

On Tuesday evening, May 1st, 2025, the official website of the Stuttgart city administration experienced intermittent accessibility issues. A city spokesperson confirmed that Stuttgart was the target of a cyber attack, attributing these disruptions directly to the incident. The attack was identified as a Distributed Denial-of-Service (DDoS) attack. This type of attack involves flooding a website or service with a massive volume of requests and data traffic generated by bots or a botnet, overwhelming the servers and rendering them unable to function normally. As a result of this sustained bombardment, users encountered periods where the city's primary online portal was unreachable.

In response to the ongoing technical problems caused by the DDoS attack, the city administration took proactive measures on Wednesday morning. They preemptively took the stuttgart.de website offline as a precautionary step. Efforts to restore full and consistent access were prioritized, with the city administration working intensively towards this goal. By Wednesday afternoon, the website was successfully brought back online and became accessible again to the public. The city spokesperson emphasized that no other internal administrative systems were compromised or affected by this specific attack; they continued to operate normally throughout the incident. This attack on Stuttgart followed a similar pattern to recent cyber incidents targeting other major German city portals, specifically mentioning Dresden and Berlin, where comparable DDoS attacks had caused extended outages just days prior.

Sources

Sources available to members: 1 source.

CSIDB