Germany's Meteor hit by ransomware; customer, supplier and staff data stolen and threatened with release

Meteor GmbH said unknown attackers breached its IT systems on the night of August 11, 2026, encrypted data with malware, copied data and are threatening to publish it online ^[1]. Affected data include customer and supplier data, personnel data and business partner information; the company wrote to those it could reach and notified the Lower Saxony data protection commissioner and police ^[1]. Meteor advises changing reused passwords, not clicking links or opening attachments in unexpected messages, and not paying to allegedly changed bank details without checking with a known contact ^[1].

Industries mainly affected: Manufacturing

1. Change your passwords, especially reused ones ^[1].
2. Do not click links or open attachments in unexpected messages; check statements for unknown debits ^[1].
3. Do not pay to allegedly changed bank details without verifying; Meteor's bank details have not changed .