POST Luxembourg

The cyberattack on POST Luxembourg resulted in a nationwide telecommunications outage, disrupting 4G and 5G mobile networks for over three hours. This led to the unavailability of emergency services due to an overloaded 2G fallback system. Internet access and electronic banking services were also inaccessible. The attack exploited a vulnerability in a standardized software component, causing significant disruption without compromising internal systems or data. The incident prompted a national resilience review and regulatory changes to enhance critical infrastructure robustness.

Source: https://therecord.media/luxembourg-telecom-outage-reported-cyberattack-huawei-tech

TPRM report: https://www.rankiteo.com/company/post-luxembourg

"id": "pos217080925",
"linkid": "post-luxembourg",
"type": "Cyber Attack",
"date": "8/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'industry': 'Telecommunications',
                        'location': 'Luxembourg',
                        'name': 'POST Luxembourg',
                        'type': 'State-owned enterprise'}],
 'attack_vector': 'Exploitation of a vulnerability in a standardised software '
                  'component',
 'date_detected': '2023-07-23',
 'date_publicly_disclosed': '2023-07-27',
 'description': "A cyberattack targeting Huawei equipment in Luxembourg's "
                'national telecoms infrastructure caused a nationwide outage, '
                'disrupting 4G and 5G mobile networks, emergency services, '
                'internet access, and electronic banking services for over '
                'three hours.',
 'impact': {'data_compromised': 'None',
            'downtime': 'Over three hours',
            'operational_impact': 'Severe disruption to telecommunications and '
                                  'emergency services',
            'systems_affected': ['4G networks',
                                 '5G networks',
                                 '2G fallback system',
                                 'Internet access',
                                 'Electronic banking services',
                                 'National alert system']},
 'investigation_status': 'Ongoing forensic investigation by CSIRT and public '
                         'prosecutor',
 'lessons_learned': 'The incident highlighted the need for robust fallback '
                    'procedures and the reassessment of critical '
                    'infrastructure resilience.',
 'motivation': 'Disruptive',
 'recommendations': 'Luxembourg is exploring regulatory changes to allow '
                    'mobile phones to automatically switch to other operators’ '
                    'networks during telecom outages.',
 'references': [{'source': 'Paperjam'}],
 'response': {'incident_response_plan_activated': True,
              'law_enforcement_notified': True},
 'title': 'Nationwide Telecommunications Outage in Luxembourg',
 'type': 'Cyberattack',
 'vulnerability_exploited': "Vulnerability in Huawei routers' VRP network "
                            'operating system'}