1
Total linked signals
Linked through an affected location, company headquarters, or both.
Geographic intelligence
Germany cybersecurity signals
Follow 1 current cybersecurity signal linked to Germany through an affected location, a profiled company's country, or both, with source reporting.
Affected-country links use structured victim-country data. Company-country links use a reviewed profile based on the organisation's headquarters or the local operating entity represented by its domain. A signal linked in both ways is counted once in the total; actor origin and locations inferred from prose remain excluded.
🇩🇪
Country context
About Germany
Reference details that help place the cybersecurity reporting in its geographic and economic context.
- Region
- Europe & Central Asia
- Capital
- Berlin
- Income group
- High income
- ISO codes
- DE / DEU
- ISO numeric
- 276
Not classified
Signals affecting this country
Victim-country data is unavailable in this reporting window.
1
Signals from companies based here
Based on reviewed company headquarters.
1
High or critical
Severity classifications among linked signals.
Explore related intelligence
Explore this reporting from another angle
Based on all published signals currently linked to Germany through an affected location, a profiled company's country, or both. Counts describe this reporting set, not overall incident prevalence.
Attack patterns
Confirmed impacts
Company-linked signals
Current reporting linked to Germany
High
Lidl Online Shop Customer Data Stolen in IT Security Incident
Lidl, the popular retail chain, announced on July 11, 2026, that it experienced a security incident involving an external IT service provider, resulting in the theft of customer data from its online shop. Unidentified attackers gained temporary access to a separate file containing customer information. The compromised data includes customers' titles, first and last names, phone numbers, email addresses, dates of birth, and customer numbers. Lidl has confirmed that passwords, billing and delivery addresses, bank details, or other payment information were not affected, and customer accounts remain secure. The company has stated that there is currently no concrete evidence of the stolen data being misused, but it has proactively warned affected customers about potential phishing attempts and identity theft. Lidl advises customers to be extra cautious with communications from unknown sources. The IT service provider involved has taken immediate steps to restore security, strengthen system protection, and has filed a criminal complaint. IT experts are also involved in the investigation to enhance future data protection. The Office for Personal Data Protection has been informed and is monitoring the case.
FAQ
Questions about Germany cybersecurity signals
What is included on the Germany page?
This page brings together current signals connected to Germany through an affected location, a reviewed company profile, or both.
Does a signal prove the attacker is based in Germany?
No. The country connection describes affected locations or profiled company locations. It does not claim actor origin unless a source explicitly establishes that separately.
Why can the number of signals change?
The page follows the rolling current-reporting window. Counts change as new incidents are added, evidence is reviewed, and older signals leave that window.