Association of German Chamber of Industry and Commerce Experiences National Shutdowns due to Cyber Attack

On August 4, 2022, the Association of German Chamber of Industry and Commerce (DIHK) confirmed that they shut down all of their IT systems, digital services, telephones, and email servers in response to a cyber-attack. The attack and subsequent shutdown were confirmed on LinkedIn by the General Manager of the IHK Mittleres Ruhrgebiet (IHK in central Ruhr), Michael Bergman, stating that the attack was detected late in the afternoon on August 3rd and affected multiple locations across Germany. There appears to be no regional focus of the attack, since IHK locations in North Rhine-Westphalia, Lower Saxony, Mecklenburg-Western Pomerania, and Bavaria have all been affected. In addition, the Twitter accounts of the Köln, Würzburg, and Lüneburg-Wolfsburg locations all have Tweeted that their offices are currently unable to answer phones or emails since the cyber-attack. A spokesperson for IHK Gesellschaft for Informationsverarbeitung (information processing) in Dortmund confirmed that all IHK systems in Germany have been affected by the attack. All services are to undergo an investigation before being restarted. The DIHK website states that they are currently working on a “solution and defense,” and that their homepage will be updated as systems return to functionality. At the time of writing, researchers from around the world suspect that ransomware was the source of the attack, but no confirmation has been made public and no ransomware groups have claimed responsibility. CTIX will continue to monitor the situation as more information is released.