The city of Vienna recently suffered a cyberattack where unknown perpetrators breached an internal documentation platform to copy 26,000 documents. The breach, totaling nine gigabytes of data, was first reported by the Austrian CERT on September 9.
The stolen files contain information on 6,000 individuals, including 2,000 municipal employees and 2,900 citizens. While most data involves names and emails, some sensitive records like IBAN numbers and sick leave days were also duplicated in the theft.
Authorities identified and closed the vulnerability with DSN assistance, ruling out phishing. CIO Klemens Himpele confirmed core systems remain secure. Affected parties are being notified, and the incident has been reported to the Data Protection Authority.