CSIDB logo
Incident

Berufsbildende Schulen (BBS) Goslar-Baßgeige

Incident posture

Attack window
Mar 2022
Location
Germany
Status
Historical
CIA posture
Available to members
Updated
2025-10-21 00:00

Linked entities

Victim
Berufsbildende Schulen (BBS) Goslar-Baßgeige
Threat actors
0 actors
Sources
1 source

Timeline

Occurred
Mar 2022
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

A cyberattack targeted BBS Goslar-Baßgeige, disrupting student data management systems and email communications. Attackers demanded approximately $180,000 in exchange for restoring access to the compromised systems. The institution reported the incident to law enforcement, initiating an ongoing investigation into the breach and ransom demands.

Motives

Detailed motive labels are available to members.

1 motive

TTPs

Detailed technique labels are available to members.

1 technique

Description

On or around March 1, 2022, the Berufsbildenden Schulen (BBS) Goslar-Baßgeige experienced a cyberattack that disrupted critical administrative functions. Attackers compromised the school's student data management systems and email communications infrastructure, rendering both inoperable. The perpetrators demanded a ransom payment of approximately 180,000 US dollars in exchange for restoring access to the affected systems. This attack directly impacted the school's operational capacity to manage student records and maintain normal communication channels. No specific details regarding the attack vector or duration of system unavailability were disclosed in public reports. The incident represented a significant disruption to institutional operations at the vocational school.

School administrators responded by filing an official police report regarding the cyber intrusion and ransom demand. Law enforcement agencies initiated investigations into the incident, though no public updates regarding investigative progress or perpetrator identification were immediately available. The attack's consequences included operational paralysis of core administrative functions essential for student record-keeping and institutional correspondence. Financial implications extended beyond the ransom demand to include recovery costs and potential data protection repercussions. Educational continuity faced challenges due to the compromised systems, though the full extent of academic disruption remained unspecified in initial reports.

Sources

Sources available to members: 1 source.

CSIDB