Vienna city administration hit by cyberattack that stole thousands of internal files

Vienna's municipal IT infrastructure suffered a cyber breach in which unknown actors gained entry to an internal documentation system and copied a massive collection of files, totaling multiple gigabytes. The stolen material comprised records of municipal staff, citizens and external contractors, including names, email addresses and, in certain cases, more delicate information like sick-leave days and bank account numbers.

The city’s chief information officer reported that no attacker obtained control over user accounts or systems, and that the vulnerability was identified and sealed with assistance from the state security directorate and the national computer emergency response team. The incident was first reported to the city after a warning from the emergency team, and authorities have notified the data protection regulator and the affected individuals. No evidence suggests that the data has been published or that the city is being extorted.