Cybercrime

Cyberattack on Tulln: City administration paralyzed

ATB.LAW Attorneys-at-Law – Incident Response and Cyber Resilience

In the night from February 10 to 11, 2025, the municipality of Tulln fell victim to a severe hacker attack. Since then, the entire server infrastructure of the city administration has been blocked, leading to significant disruptions in daily operations.

Incident Response Cyber Attack Prevention Lawyer Vienna

Table of Contents

Scope and impact of the attack

The cyberattack affects the entire server infrastructure of the municipality of Tulln, with the stored data having been encrypted by the attackers. Around 200 workstations are affected and are now unable to access important data for an indefinite period. As a result, numerous services based on this data cannot currently be provided.

Limited services

Due to the attack, many administrative services are unavailable. These include the issuance of registration certificates and criminal record extracts, as well as the application for heating cost subsidies. Electronic notices and bank transfers cannot be processed at the moment either.

Communication channels and citizen services

Urgent inquiries can currently only be made by phone or in person at the citizen service center. The city administration asks citizens for their understanding regarding the limited communication options and is working on providing alternative solutions.

Impact on recreational businesses

The city's leisure facilities are also affected. While amenities such as swimming pools and sports facilities remain open, cashless payment is currently not possible, leading to inconveniences for visitors.

Measures and investigations

The city's IT department is working intensively with external IT experts and federal and state security authorities to analyze the damage and develop solutions. It is being investigated whether sensitive data was stolen and how the systems can be restored as quickly as possible.

The police have launched an investigation against unknown perpetrators. Interestingly, a company in Amstetten recently also fell victim to a similar hacker attack, pointing to a possible series of cyberattacks in Lower Austria. A connection between the incidents is currently being investigated.

Support by Incident Response Teams

Such incidents demonstrate how important a rapid and professional response to cyberattacks is. Companies and public institutions face the challenge not only of minimizing damage, but also of sustainably improving their IT security measures. ATB.LAW is part of a well-coordinated incident response team that supports companies in managing cyberattacks. Through close cooperation with IT forensic experts, law enforcement agencies, and specialized security experts, ATB.LAW helps to limit the impact of an attack and develop preventive measures for the future.

Cyber resilience as a duty

The multitude of incidents shows that cyber resilience is no longer a luxury for companies, but an absolute necessity. Prevention and rapid responsiveness are essential to protect against the ever-growing threat of cybercrime. ATB.LAW supports companies not only in crisis management, but also in the implementation of prevention concepts and measures to strengthen IT security.

This incident underscores the growing threat of cybercrime and the need for robust security measures in public administrations. 

Prevention is the best protection against cybercrime. Attorney-at-Law Roman Taudes and his Team support companies together with strategic IT partners in the implementation of prevention measures and concepts. For further information and individual consultation, we are available at any time at office@atb.law or by phone at 01 39 12345 available. 

More articles

ATB.LAW Cybercrime Lawyer

Cybercrime in Austria

Legal situation, figures, and action steps
Picture of Roman Taudes
Roman Taudes
Business Email Compromise (BEC)

Business E-Mail Compromise

Who is liable – and when does a GDPR reporting obligation apply?
Picture of Roman Taudes
Roman Taudes
Cyberattack reporting obligations NIS GDPR MAR

Reporting obligations in the event of cyber attacks

What the TeamViewer case means for Austrian companies
Picture of Roman Taudes
Roman Taudes