Deutschland is a country tracked across 10 threat clusters and 12 intelligence report mentions on ThreatCluster. First observed March 5, 2026; most recent activity July 22, 2026.
On April 22, 2026, the BSI and BfV reported an active phishing campaign targeting high-profile individuals in Germany via the Signal messaging app. The campaign, attributed to a likely state-sponsored actor, focuses on…
On July 20, 2026, German and U.S. authorities dismantled the Kratos phishing-as-a-service (PhaaS) platform, arresting its developer in Indonesia. The operation neutralized over 200 servers and disrupted approximately…
Europol announced the closure of Leakbase, one of the largest platforms for stolen data, during an international operation led by the Amsterdam police. The marketplace had 142,000 registered users globally, and its…
A joint operation by the German Federal Criminal Police (BKA) and U.S. authorities has dismantled the infrastructure of Kratos, a major phishing service responsible for stealing credentials from hundreds of thousands of…
A cyberattack on external billing service providers has compromised patient data across several German hospitals, including the Universitätsklinikum Freiburg, Universitätsklinikum Düsseldorf, and Universitätsklinikum…
Recent phishing attacks targeting politicians and officials in Germany have raised security concerns, particularly regarding the use of messenger services. Bundestag President Julia Klöckner has recommended the adoption…
Bedfordshire Hospitals NHS Foundation Trust reported a data security incident affecting approximately 32,927 patients. The breach occurred in June 2024 when criminals executed a ransomware attack on a supplier, leading…
The German financial regulator Bafin has issued warnings regarding the dangers posed by risky real estate loans, noting that one in seven new loans exceeds the value of the financed property. This trend raises concerns…
On July 1, 2026, Link11 announced the launch of its next-generation Layer 3/4 DDoS mitigation solution, addressing the complexities of modern DDoS attacks. These attacks can originate from compromised devices within…
The Cyberagentur has initiated the ARCH project to develop a comprehensive model for measuring the harm caused by cybercrime in Germany. This project aims to capture not only financial losses but also intangible and…