Cyber attack on the consumer advice center in Hesse

The Hesse consumer advice center does not have good news for its customers. A cyber attack has resulted in the encryption of important data. Until the problem is solved, the consumer advice center can only be reached to a limited extent.

Cyber attack on February 22, 2024

Last week, there was an extensive attack on the consumer advice center in Hesse. The focus of the cyberattack was not the theft of sensitive customer data. Rather, the non-profit organization is currently not really accessible to interested parties. This is because important server and backup systems were paralyzed and encrypted as part of the attack. However, the consumer advice center has now let the public know in a press release that it is working at full speed on a solution to the problem.

The number one goal was to at least be reachable by phone again for consumer concerns. Before the problem is solved, the organization can only be reached by email. But here too, operations are “still restricted in some areas”. The only exception is for personal consultations. These should remain unaffected by the current problems. It should also still be possible to visit the website in the same way as an “analog” visit to the relevant advice centers.

• A glimmer of hope? Hacking group Lockbit has apparently been disbanded

Background still unknown

Of course, the question of how the attack on the sensitive server structures could have happened in the first place is exciting. It is also not yet known who could be behind the attack. The consumer advice center has not yet commented on possible demands for ransom. However, it already seems to be a foregone conclusion that this was a cyber attack using ransomware. The picture that emerged after the attack is far too striking. Encrypted systems usually clearly indicate a ransomware attack.

Furthermore, it is currently still uncertain whether sensitive organizational data or customer data may have been stolen as part of the attack. If there is any certainty in this regard, the consumer advice center will contact the people affected immediately. In the same breath, however, there is also an all-clear for consumers who now fear for the personal consequences of the data leak. According to its own information, there is probably “very little consumer data” in the affected server structure.

Clarification should follow soon

Not even a week has passed since the cyber attack on the consumer advice center occurred. In order to lift the encryption as quickly as possible and clarify the background, the organization has brought in renowned support. In addition to IT security experts, the organization is also in close contact with the responsible data protection officers and the IT security office of the state of Hesse. A criminal complaint has also been filed, which is why it will not be long before proceedings are initiated.