Ransomware (extortion): Municipality and public administration, Germany 2021
After a ransomware attack, on 9 July 2021 the district became the first German local authority to declare a state of disaster because of a hacker attack.
- Incident · 07.2021 · Saxony-Anhalt (district of Anhalt-Bitterfeld), Germany
- Evidence: confirmed by an authority
- Ransomware (extortion)
As of
What happened
The administration refused to pay a ransom; the state of disaster was only lifted in February 2022. In March 2024, the district put the total costs at 2.5 million euros.
- Affected
- District of Anhalt-Bitterfeld
- Loss
- EUR 2.5 million
- Business interruption
- unknown
- Ransom demanded / paid
- yes / no
- Data affected
- true
- Bankruptcy
- no
- Entry point
- not stated in the sources
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
Loss of income after an attack
Business interruption, only after the waiting period
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
-
Costs of getting data, software and systems running again
Mostly covered 6 of 9 business products cover it fully, as an add-on or with limits.
-
Immediate help in an emergency
Hotline, IT forensics, crisis PR and legal advice
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
Recovery from ransomware often takes months and costs many times the first estimate.
Sources
- Cyberangriff kostete Anhalt-Bitterfeld 2,5 Millionen Euro (opens in a new window) Volksstimme (dpa) · 2024-03
- Cyberangriff auf Landkreis Anhalt-Bitterfeld 2021 (opens in a new window) KommunalWiki (Heinrich-Böll-Stiftung)
Similar cases
- Ransomware (extortion): Municipality and public administration, Switzerland 2026
- Ransomware (extortion): Municipality and public administration, Switzerland 2026
- Ransomware (extortion): Municipality and public administration, Switzerland 2023
- Ransomware (extortion): Municipality and public administration, Switzerland 2021