IMA Schelling encryption attack restricts machinery service and spare-parts orders

On April 15, 2022, an encryption-Trojan attack against IMA Schelling prompted the company to disconnect its systems. In its April 20 communication, the company said its ERP had been restored sufficiently to handle customer-service requests, service orders and spare-parts orders only with restrictions, evidencing actual disruption to machinery aftermarket service delivery and order processing. Police in Austria and Germany investigated; no verified attacker identity or exact operational outage duration was disclosed.