Ransomware (extortion): Company, Germany 2023
In March 2023, the Royal group encrypted all systems; the servers could no longer be started.
- Incident · 03.2023 · Germany
- Evidence: several media
- Ransomware (extortion)
As of
What happened
According to reports, Einhaus paid around 200'000 euros; the authorities later seized the cryptocurrency but did not return it, which caused the restructuring to fail. The company shrank from around 170 to 8 employees, and insolvency proceedings were filed for three companies.
- Affected
- Einhaus Gruppe
- Industry
- other industry
- Loss
- mid seven-figure amount (according to Westfälischer Anzeiger)
- Business interruption
- unknown
- Ransom demanded / paid
- yes / yes
- Data affected
- unknown
- Bankruptcy
- yes
- Entry point
- not stated in the sources
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
Loss of income after an attack
Business interruption, only after the waiting period
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
-
Costs of getting data, software and systems running again
Mostly covered 6 of 9 business products cover it fully, as an add-on or with limits.
-
Help and negotiation; only some insurers pay the ransom, see note
Mostly add-on 6 of 9 business products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
Paying a ransom does not save the company if recovery still takes months.