Lyce · Hybrid Watch

hw_942508b1ae32ed53

Cyber sabotage (DDoS) on German railway services.

Germany’s railway operator, Deutsche Bahn, has been targeted by a large-scale cyberattack, reportedly potentially linked to russian hackers. As a result of a series of DDoS attacks, the ticket booking system and passenger information services were paralyzed, disrupting the operation of critical transport infrastructure in one of the EU’s largest economies. Based on their characteristics and technical tools, similar attacks have repeatedly been associated with hacker groups controlled by russian intelligence services, including APT28 and NoName057(16). Their activities form part of russia’s hybrid strategy aimed at destabilizing European Union member states.

Occurrence
2026-02-02
Publication
2026-02-02T10:05:31Z
First observed
2026-09-24T06:09:10.079Z
Review status
Not assessed
Countries
DE
Updated
2026-09-27T23:56:59.668Z

E/M/R/S scores

  • EExistence0/4 · Not assessed
  • MIntent0/4 · Not assessed
  • RRussian actor link0/4 · Not assessed
  • SRussian state responsibility0/4 · Not assessed

Facts

No facts

Sources

  1. Role
    discovery_lead
    Date
    2026-02-02T10:05:31Z

    Germany’s railway operator, Deutsche Bahn, has been targeted by a large-scale cyberattack, reportedly potentially linked to russian hackers. As a result of a series of DDoS attacks, the ticket booking system and passenger information services were paralyzed, disrupting the operation of critical transport infrastructure in one of the EU’s largest economies. Based on their characteristics and technical tools, similar attacks have repeatedly been associated with hacker groups controlled by russian intelligence services, including APT28 and NoName057(16). Their activities form part of russia’s hybrid strategy aimed at destabilizing European Union member states.