Stadtwerke Landsberg ransomware attack

On 3 September 2026, it was reported that Stadtwerke Landsberg, the municipal utility of Landsberg am Lech in Bavaria, had been hit by a criminal ransomware attack that encrypted its central IT systems during the night of 1 September. The attack limited the utility's availability by phone and email.

The utility said its essential services were not affected: the electricity grid, water supply, wastewater treatment, district heating, fibre-optic network, electric-vehicle charging points, public swimming pool and parking garages all continued to operate. As a precaution it disconnected its systems from the internet, shut down affected machines, activated its crisis plan and brought in external cybersecurity and IT-forensics specialists to investigate and rebuild.

Data exposure

Stadtwerke Landsberg warned that personal data may have been exfiltrated and advised customers to be alert to phishing and other social-engineering attempts using their details. At the time of reporting no ransomware group had publicly claimed the attack.

Why it matters

Municipal utilities operate critical infrastructure with limited security budgets. In this case the separation between office IT and the operational systems that run water, power and heating kept supply running, but the incident shows how routinely German local utilities are now targeted and how customer data held in their business systems remains exposed even when operations are protected.