Cyber incident: Energy and utilities, Germany 2026
After a cyber attack that became known on 28 June 2026, the municipal utility took all internal systems and apps offline; the customer portal, telephone and email were disrupted.
- Incident · 06.2026 · North Rhine-Westphalia (Kamen, Bönen, Bergkamen), Germany
- Evidence: confirmed by an authority
As of
What happened
Instalments could not be collected by direct debit, EEG payments could not be paid out, and card payments were not possible at swimming pools. According to GSW, supply remained secure; the type of attack was not disclosed, and the State Criminal Police Office (LKA) is investigating.
- Affected
- GSW Gemeinschaftsstadtwerke Kamen, Bönen, Bergkamen
- Industry
- Energy and utilities
- Loss
- no reliable figure
- Business interruption
- unknown
- Ransom demanded / paid
- unknown / unknown
- Data affected
- unknown
- Bankruptcy
- no
- Entry point
- not stated in the sources
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
Loss of income after an attack
Business interruption, only after the waiting period
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
-
Immediate help in an emergency
Hotline, IT forensics, crisis PR and legal advice
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
-
Costs of getting data, software and systems running again
Mostly covered 6 of 9 business products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
Even when electricity and water keep flowing, an attack paralyses billing, customer service and payments.
Sources
- GSW nehmen nach Cyberangriff interne Systeme offline (opens in a new window) ZfK – Zeitung für kommunale Wirtschaft · 2026-07-02
«Die Versorgungssicherheit sei jedoch nicht beeinträchtigt»