Erfurt

Erfurt is a municipal authority that administers the city of Erfurt in Germany and provides a range of public services to its residents, businesses, and visitors. Its core functions include local governance, urban planning, public safety, waste management, and the delivery of social and cultural programmes. The organisation maintains an online presence through the domain erfurt.de, which serves as an information portal and e‑government platform for citizens to access municipal announcements, forms, and service requests. The municipal IT office, referenced in the incident report, is responsible for managing the city’s information technology infrastructure, including website hosting, network security, and digital service delivery. Through this digital channel Erfurt aims to improve transparency, facilitate communication between the administration and the public, and streamline administrative processes. The website also provides access to emergency notifications, event calendars, and details about local regulations and permits. By offering these services online, Erfurt supports the broader goal of modernising public administration and enhancing citizen engagement within the framework of German municipal law.

As a local government entity Erfurt operates under the regulatory regime that governs German municipalities, which includes compliance with federal and state data protection, accessibility, and IT security standards. Its distinguishing attribute in the context of cybersecurity is the experience of a distributed denial‑of‑service attack on 29 July 2025, when the city’s website was flooded with up to 4.5 million accesses per hour, prompting a rapid response from the municipal IT office and notification of the State Criminal Police Office, the Thuringian State Computing Center, and the Central Cybercrime Contact Point. This incident was part of a wider wave targeting multiple German authorities, highlighting Erfurt’s role as a representative of municipal digital infrastructure that can be subject to coordinated cyber threats. Structurally, Erfurt is owned and governed by the city of Erfurt itself, functioning as a public law corporation without private shareholders, and its IT operations are overseen by the municipal administrative department. The organisation’s accountability rests with the elected city council and the mayor, ensuring that its services align with public policy objectives and the needs of the community it serves.