An online attack on Badewelt Sinsheim resulted in unauthorized access to the database system that Badewelt uses to deliver newsletters.
The representative claimed that some of the users' email addresses and maybe real names had been taken.
They claim that passwords and account information are unaffected. The number of users whose data was stolen and whether the hackers demanded a ransom were also unsolved concerns.
The supervisory body for data protection has received a report from Badewelt.
All clients were emailed about the situation as a precaution.
Source: https://www.stimme.de/polizei/kraichgau/cyber-angriff-auf-sinsheimer-badewelt-art-4756197
TPRM report: https://scoringcyber.rankiteo.com/company/thermen-badewelt-sinsheim
"id": "the562823",
"linkid": "thermen-badewelt-sinsheim",
"type": "Breach",
"date": "03/2023",
"severity": "25",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Leisure and Recreation',
'location': 'Sinsheim, Germany',
'name': 'Badewelt Sinsheim',
'type': 'Business'}],
'attack_vector': 'Unauthorized Access',
'customer_advisories': 'All clients were emailed about the situation as a '
'precaution.',
'data_breach': {'personally_identifiable_information': 'Real names',
'type_of_data_compromised': ['Email addresses', 'Real names']},
'description': 'An online attack on Badewelt Sinsheim resulted in '
'unauthorized access to the database system that Badewelt uses '
'to deliver newsletters. The representative claimed that some '
"of the users' email addresses and maybe real names had been "
'taken. They claim that passwords and account information are '
'unaffected. The number of users whose data was stolen and '
'whether the hackers demanded a ransom were also unsolved '
'concerns.',
'impact': {'data_compromised': ['Email addresses', 'Real names'],
'systems_affected': 'Database system'},
'regulatory_compliance': {'regulatory_notifications': 'The supervisory body '
'for data protection '
'has received a report '
'from Badewelt.'},
'response': {'communication_strategy': 'All clients were emailed about the '
'situation as a precaution.'},
'title': 'Unauthorized Access to Badewelt Sinsheim Database',
'type': 'Data Breach'}