An external software supplier from the Pensionskasse of the Federal PUBLICA has become the victim of a cyberattack at the end of September 2026. On 8 October, PUBLICA confirmed that data has been collected. According to the information published so far, the attack did not meet PUBLICA itself, but a company providing software to the Pensions Fund.
What data are in detail and how great the incident is is is not yet established. The company informs the extent together with PUBLICA and the relevant federal agencies.
The supplier noted the attack at the end of September, reimbursed criminal complaint and informed the affected customers and the competent authorities of the federal government. According to the announcement, the Federal Prosecutor's Office opened a criminal proceedings.
According to the current state of knowledge, no further federal offices maintain a business relationship with the affected company. This statement limits the known circle of the directly affected federal organisations, but does not say anything about the nature and quantity of the exempted PUBLICA data.