Phishing: Retail (shop), Germany
An employee opened an email with a supposed job application, whereupon malware was installed.
- Incident · date unknown · Lower Saxony, Germany
- Evidence: one media report
- Phishing
- Malware
As of
What happened
Within a very short time the tills failed, and the shop had to close for several days. The loss amounted to several thousand euros, plus reputational damage.
- Affected
- Company (anonymous)
- Industry
- Retail (shop)
- Loss
- several thousand euros
- Business interruption
- unknown
- Ransom demanded / paid
- unknown / unknown
- Data affected
- unknown
- Bankruptcy
- no
- Entry point
- Email with a supposed job application
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
Loss of income after an attack
Business interruption, only after the waiting period
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
-
Costs of getting data, software and systems running again
Mostly covered 6 of 9 business products cover it fully, as an add-on or with limits.
-
Loss of income because customers stay away after the incident
Mostly no information 1 of 9 business products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
Job application emails with attachments are a classic point of entry; tills belong in a network separate from the office.
Sources
- IT-Sicherheit für kleine Betriebe: Tipps vom Fachanwalt (opens in a new window) Deutsches Handwerksblatt (Fälle von Rechtsanwalt Dr. Marc Maisch) · 2025-06
«Innerhalb kürzester Zeit waren die Kassen ausser Betrieb.»