Eichstätt says hackers stole 1.5 terabytes of data

Hackers copied nearly 1.5 terabytes of data from the city of Eichstätt, more than a quarter of its total data, in an attack last month, BR reported. Some of the stolen files may contain personal information, the city said.

The attack took place on October 10. The data was copied and taken abroad. After investigations led by the Bavarian State Criminal Police Office, the city said it was possible the hackers had accessed residents’ basic details, including names, addresses, telephone numbers and email addresses.

The attackers created two folders containing stolen data. Investigators have been unable to determine the contents of the smaller folder, which holds nearly 0.5 terabytes and is heavily encrypted. Mayor Josef Grienberger said it was a “black box.” The city cannot rule out that identity and registration records were also copied, potentially including dates of birth, nationality, registered addresses, height and eye colour.

Data from the city’s pension advice service may also have been taken. This could include information about employment, income and family circumstances, pension points and pension insurance numbers. Residents who pay property, dog or second-home taxes to the city may also be affected.

The city has a clearer picture of the larger folder, which contains about one terabyte. Grienberger said it did not contain structured personal data, and there was no evidence that complete, structured records from the population register or tax system had been taken. The city said its data had not been lost because it had up-to-date backups.

Municipal services remain restricted. Grienberger said fewer than 30 percent of administrative processes were operating normally. The city cannot yet issue identity cards or register residents because the required software is not running. In urgent cases, such as travel abroad, the Eichstätt municipal association is providing assistance.

The town hall ended its emergency operation on Monday, allowing residents to contact all city administration staff by phone and email. Building applications can be submitted on paper, business registrations can be made or changed, and the registry office has reopened for weddings.

The attackers have not demanded a ransom. The city said it would not pay and ruled out a political motive, describing itself as an accidental victim. It plans to brief residents online via Webex on November 11 at 8 p.m.