Eu-Rec GmbH

Eu-Rec GmbH is a company headquartered in Germany. The organization maintains records that contain personal data of private customers and company contacts. These records include email addresses, telephone numbers, postal addresses, contact persons, and bank connection details. By holding this information, Eu-Rec GmbH processes personal data as part of its regular business activities. Its German location places it under the applicable data protection legislation of the European Union.

On 7 April 2025, Eu-Rec GmbH discovered a cyberattack that led to unauthorized access to the aforementioned personal data. The incident affected approximately 200 private customers and company contacts. The compromised data set consisted of the same categories of information normally stored by the organization. The breach was disclosed in a formal notice to the data protection authority, which is available as a PDF on the company’s website. No additional technical details about the attack method or threat actors were provided in that disclosure.

Upon discovering the breach, Eu-Rec GmbH reset all passwords associated with the affected systems. It then re‑encrypted the compromised data before moving the information to a secure storage environment. The organization also implemented further technical and organizational measures to prevent any subsequent unauthorized access. These steps reflect a response aimed at restoring confidentiality and integrity of the data. The episode highlights the sensitivity of the information Eu-Rec GmbH handles and the necessity of robust security controls.