RESEARCH PREVIEW — Attention: Data Spaces may hack the planet.

Germany

Analyse
Primarily a target — 6 received· 0 initiated· 1 responses ·EU · NATO

This month to date, 6 new cyber operations involving Germany were added to the database: a 500% increase compared to the previous period. The number of operations is currently 100% above the long-term month-to-date average. The Intensity of cyber operations involving Germany cannot yet be calculated.

Maintained by EuRepoC research analysts · updated 16 Oct 2026
6received initiated0
For this month to date, this country appears chiefly as a target — 6 incidents directed at it, 0 it is linked to initiating.
Source: EuRepoC Global Database as of 16 Oct 2026.
01 / 02

Cyber activity

6 incidents · as target

Incidents directed at Germany targets, and the responses they drew.

Cyber incident intensity
4.0/15
Mean4.0/15Moderate

Only one intensity value in this selection.

1 coded incident · This month to date
Database additions by dayincidents against Germany
Bar height shows incidents added during this month to date; select a bar to filter this interval; hover for average intensity.
Most-targeted sectorswhat gets hit
Civil service / administration is the most-targeted sector — 4 of 6 incidents, 0 answered.
02 / 02

Incidents received & responses

Unknown Germany ·Civil service / administration Unidentified Threat Actors Breached Fire Brigade Headquarters in Wolsfeld in Germany on 11 October 2026 11 Oct 2026
Incident · Unattributed 11 Oct 2026
Unknown Germany ·Civil service / administration
Unidentified Threat Actors Breached Fire Brigade Headquarters in Wolsfeld in Germany on 11 October 2026
Unknown Germany ·Civil service / administration Unknown Threat Actors Conducted Ransomware Attack On City Administration Of Eichstätt In Germany On 10 October 2026 10 Oct 2026
Incident · Unattributed 10 Oct 2026
Unknown Germany ·Civil service / administration
Unknown Threat Actors Conducted Ransomware Attack On City Administration Of Eichstätt In Germany On 10 October 2026
Unknown Germany ·Civil service / administration Unknown Threat Actor Compromised Website of City of Dülmen in Germany on 6 October 2026 6 Oct 2026
Incident · Unattributed 6 Oct 2026
Unknown Germany ·Civil service / administration
Unknown Threat Actor Compromised Website of City of Dülmen in Germany on 6 October 2026
Safepay ransomware group Germany ·Digital Provider Safepay Ransomware Group Breached IT Subsidiary of Deutsche Telekom T-Systems in Germany in September 2026 1 Sep 2026
Incident 1 Sep 2026
Safepay ransomware group Germany ·Digital Provider
Safepay Ransomware Group Breached IT Subsidiary of Deutsche Telekom T-Systems in Germany in September 2026
WaterPlum (313 General Bureau of the Munitions Industry Department) ADAEAFAL+185189 countries ·End user(s) / specially protected groups North Korea's WaterPlum aka Contagious Interview Infected at Least 30,000 Devices of IT Professionals in Over 100 Countries from December 2025 to July 2026 1 Dec 2025
Incident · Low severity 1 Dec 2025
WaterPlum (313 General Bureau of the Munitions Industry Department) ADAEAFAL+185189 countries ·End user(s) / specially protected groups
North Korea's WaterPlum aka Contagious Interview Infected at Least 30,000 Devices of IT Professionals in Over 100 Countries from December 2025 to July 2026
MuddyWater (MOIS) ADAEAFAL+185189 countries ·Civil service / administration +4 Iranian State-Sponsored Hacking Group MuddyWater Conducted Espionage Against Government and Private-Sector Organisations in Asia, Africa, Europe and North America Since 2018 1 Jan 2018
Incident 1 Jan 2018
MuddyWater (MOIS) ADAEAFAL+185189 countries ·Civil service / administration +4
Iranian State-Sponsored Hacking Group MuddyWater Conducted Espionage Against Government and Private-Sector Organisations in Asia, Africa, Europe and North America Since 2018
Showing the 6 most recent of 6 Open all in advanced search
Search