Deutsche Flugsicherung (DFS), the German state-owned company responsible for the country’s air traffic control, has confirmed that it was the target of a cyberattack. Despite the breach, the agency has assured the public that flight safety remains fully guaranteed and that air traffic control operations have not been disrupted.
The exact nature of the cyberattack is still unclear, and the investigation is ongoing. A spokesperson for DFS disclosed that the incident has primarily affected the company’s administrative IT infrastructure. “Whether and, if so, which data could be accessed is still being investigated,” the spokesperson noted, emphasizing that Germany’s security authorities have been notified.
The Federal Office for Information Security (BSI), Germany’s national cybersecurity authority, is overseeing the incident’s management. The BSI is working closely with DFS and other relevant authorities to mitigate any potential risks arising from the attack.
Reports from Bayerischer Rundfunk, a major public broadcasting network in Germany, suggest that the cyberattack may have been orchestrated by APT28, a well-known threat actor linked to Russia’s military intelligence service, the GRU. APT28, also known as Fancy Bear, has been associated with numerous high-profile cyberattacks globally, often targeting governmental and critical infrastructure entities.
While the BSI has not confirmed the involvement of APT28, they have acknowledged the seriousness of the situation. A BSI spokesperson stated that the agency is providing extensive support to those affected and is in constant communication with other authorities. However, the spokesperson declined to divulge further details, citing the ongoing investigation.
This incident highlights the increasing threat of cyberattacks on critical infrastructure, particularly those linked to national security. The involvement of a sophisticated threat actor like APT28, if confirmed, would underscore the strategic nature of such attacks and the potential geopolitical implications.
As Germany continues to assess the impact of the breach, DFS has reiterated its commitment to ensuring that the country’s air traffic control operations remain secure and fully functional.
