BSI Confirms No Data Breach After Deutsche Bahn DDoS Attack, Service Disruption Only
Mixed

BSI Confirms No Data Breach After Deutsche Bahn DDoS Attack, Service Disruption Only

According to the German Federal Office for Information Security (BSI), the cyberattack on Deutsche Bahn has had no further impact.
BSI president Claudia Plattner told RBB‑Inforadio on Thursday that the situation appears to be under control, but new waves could arise at any time. She emphasized that the attack did not concern customer data: “Customer data is not involved in such attacks-only the service is disrupted, so customer requests don’t get through”.

The incident was a DDoS that kept Deutsche Bahn’s IT systems offline for two days. In a DDoS, multiple sources bombard a system with requests until it is overloaded. “DDoS attacks have existed for decades, but modern ones are of such quality that even large companies can be brought under pressure” Plattner said. She added that attackers aim to create a sense of uncertainty.

Plattner noted that such attacks have risen since the Russian invasion of Ukraine, observing that many incidents now appear to originate from Russia. Whether Russia is behind this particular attack remains unclear; the BSI is still investigating and cannot comment further at the moment.