Cyber Incident Victim: Stadt Stuttgart
Date:
Apr 2025
Location:
Germany
Summary
The Stuttgart city administration website experienced intermittent unavailability due to a cyber attack identified as a DDoS incident. This involved overwhelming the site's servers with excessive traffic, prompting a temporary precautionary shutdown before partial restoration. While the city administration worked to ensure consistent accessibility, other municipal systems remained unaffected and functional throughout the event.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On Tuesday evening, May 1st, 2025, the official website of the Stuttgart city administration experienced intermittent accessibility issues. A city spokesperson confirmed that Stuttgart was the target of a cyber attack, attributing these disruptions directly to the incident. The attack was identified as a Distributed Denial-of-Service (DDoS) attack. This type of attack involves flooding a website or service with a massive volume of requests and data traffic generated by bots or a botnet, overwhelming the servers and rendering them unable to function normally. As a result of this sustained bombardment, users encountered periods where the city's primary online portal was unreachable.
In response to the ongoing technical problems caused by the DDoS attack, the city administration took proactive measures on Wednesday morning. They preemptively took the stuttgart.de website offline as a precautionary step. Efforts to restore full and consistent access were prioritized, with the city administration working intensively towards this goal. By Wednesday afternoon, the website was successfully brought back online and became accessible again to the public. The city spokesperson emphasized that no other internal administrative systems were compromised or affected by this specific attack; they continued to operate normally throughout the incident. This attack on Stuttgart followed a similar pattern to recent cyber incidents targeting other major German city portals, specifically mentioning Dresden and Berlin, where comparable DDoS attacks had caused extended outages just days prior.