Cyber Incident Victim: SDZ Druck und Medien GmbH
Date:
May 2022
Location:
Germany
Summary
A cyberattack targeted SDZ Druck und Medien GmbH, disrupting computer and editorial systems, including critical infrastructure for e-paper production, website operations, and email communications. This caused the unavailability of the Tuesday editions of affiliated newspapers and severely limited digital workflows, preventing standard reader and editorial interactions. Technical teams are actively addressing the incident, though the full scope remains unclear, with updates being provided through the organization’s websites and social media channels. The reader service remains accessible via phone despite high call volumes and potential delays.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 2 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On the night leading into Tuesday, May 31, 2022, SDZ Druck und Medien GmbH—publisher of the Schwäbische Post and Gmünder Tagespost newspapers—experienced a cyberattack targeting its computer and editorial systems. The intrusion disrupted critical infrastructure responsible for producing the E-Paper editions, rendering the Tuesday issues of both publications unavailable to readers. Internal operations were severely impaired, with editorial teams unable to fully utilize their homepage content management systems or conduct routine email communications. The attack paralyzed the organization’s primary digital channels, isolating staff from external email correspondence and limiting their capacity to publish updates through standard workflows. This systemic failure extended to customer-facing services, compounding operational paralysis across multiple departments.
Technical response teams immediately initiated recovery efforts, working intensively to restore compromised systems, though the full scope of the attack remained undetermined during the initial response phase. The publisher prioritized transparency, directing readers to monitor official websites and Facebook channels for progress reports amid the disruption. Customer service contingencies were activated, with the Leserservice (reader service) phone line remaining operational for urgent inquiries, though high call volumes led to significant wait times. The incident’s logistical repercussions included prolonged production halts for digital editions and constrained editorial output, directly impacting news distribution timelines. Organizational communications emphasized regret for service interruptions while maintaining focus on technical remediation and stakeholder updates through alternative platforms.