Neuhaus Gruppe

Neuhaus Gruppe (also known as Einhaus Gruppe) is a service provider headquartered in Germany. It provides data processing and IT services to clients, particularly in the bike leasing sector. The firm handles personal information such as names, addresses, email addresses, phone numbers, and contract details on behalf of its partners. Its role involves managing systems that store and transmit sensitive customer data for leasing agreements. The company operates under the alias Neuhaus Gruppe in certain markets.

The organisation specialises in safeguarding and processing personal data for leasing and mobility service providers. It is positioned as a trusted third‑party vendor that supports contractual and financial workflows for its clients. Evidence of its competency includes the handling of employer banking information and business contact credentials as part of its service offerings. The firm’s focus on data‑intensive services makes it a notable player in the niche of mobility‑related outsourcing. Its activities are subject to data protection regulations applicable in Germany and the EU.

On 17 March 2023, Neuhaus Gruppe (as Einhaus Gruppe) suffered a ransomware attack that resulted in unauthorized access to personal data of customers of the bike leasing company JobRad, specifically those linked to its Mercator‑Leasing GmbH partner. The breach exposed names, addresses, email addresses, phone numbers, contract details, and potentially employer banking information and business contact credentials. Stolen data was subsequently offered for sale on darknet forums, heightening phishing and fraud risks for affected individuals. The attack was confined to the service provider’s systems; JobRad’s own infrastructure remained unaffected, although its externally managed Ratenschutzportal remained offline following the incident. Customers associated with JobRad’s other leasing partner were not impacted by the breach.