Cyberattack on Stadtwerke Landsberg Encrypts IT Systems

• •Stadtwerke Landsberg experienced a cyberattack that encrypted its IT systems on September 11, 2026.
• •Operational systems remained unaffected, but administrative functions were disrupted.
• •Experts emphasize the vulnerability of smaller utilities due to limited cybersecurity resources.

On September 11, 2026, Stadtwerke Landsberg, a municipal utility in Bavaria, Germany, suffered a cyberattack that encrypted its central IT systems. While administrative and communication systems were disrupted, operational systems remained functional, preventing service outages. The attackers' methods and whether any data was exfiltrated are currently unclear. Experts warn that smaller regional infrastructure providers are vulnerable due to limited cybersecurity resources. The attack coincided with heightened tensions in Germany, where the government blamed Russia for a drone strike at an airport and other sabotage incidents. This incident follows similar attacks on U.S. water systems in July, highlighting a growing trend of targeting critical infrastructure. The utility issued a GDPR notification six days post-attack, indicating potential risks to personal identifiable information (PII). Ransomware and nation-state actors are both seen as threats to such utilities.