Germany
DEU
Royal ransomware cripples Einhaus mobile insurance and repair operations
During spring 2023, ransomware attributed to Royal encrypted Einhaus's contracts, billing records and communications systems. The German company reported an abrupt halt in normal daily operations and months of disrupted insurance claims processing, with manual workarounds, delays and lost revenue. Founder Wilhelm Einhaus later linked the attack and ensuing losses to insolvency proceedings involving several affiliated companies in 2025.
96
Estimated severity
96 / 100
80
Source reliability
80 / 100
Approximate Date
2023-03-15
Targeted Company
EINHAUS
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
Germany
Affected countries
Germany
Impacted regions
North Rhine Westphalia · Germany
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
Operational disruptionService degradationService unavailability
Affected sectors
Finance & Insurance
Affected departments
AccountingCustomer ServiceFinanceInformation Technology
Attack Profile
Attack types
Ransomware
Attributed threat actors
ROYAL
Sources
Incident Sources
wa.dehttps://www.wa.de/hamm/hacker-richten-millionenschaden-in-hamm-an-und-stuerzen-firma-in-die-pleite-insolvenz-93845354.htmltheregister.comhttps://www.theregister.com/security/2025/08/04/german-phone-repair-biz-collapses-following-2023-cyberattack/501573golem.dehttps://www.golem.de/news/einhaus-gruppe-hacker-ruinieren-grossen-deutschen-elektronikversicherer-2507-198612.html