German air traffic control agency confirms cyberattack, says operations unaffected

Deutsche Flugsicherung, the German state-owned company responsible for the country’s air traffic control, has confirmed being hit by a cyberattack.

The nature of the attack is unclear. A press officer told Recorded Future News on Monday that the incident is affecting the company’s administrative IT infrastructure.

“Whether and, if so, which data could be accessed is still being investigated,” the spokesperson stated, adding that the country’s security authorities have been informed.

They stressed that flight safety in Germany “is fully guaranteed” and that air traffic control operations were unaffected.

Germany’s Federal Office for Information Security (BSI) is managing the incident. 

According to Bayerischer Rundfunk, the incident is suspected to have been caused by APT28 — a threat actor attributed to Russia’s military intelligence service, the GRU.

A spokesperson for the BSI said the agency was supporting those affected and was in close dialogue with other authorities. They declined to comment on further details of the incident.