Bottom line: Germany is a hotspot for ransomware attacks that are frequently coordinated from Russia, with hospitals and clinics being particularly at risk.
Germany is a preferred target for ransomware attacks. Russia serves as an operational safe haven for cybercriminals who coordinate their operations from there.
Germany is experiencing a high concentration of ransomware attacks. Security experts demonstrate that a significant number of these attacks are initiated or coordinated from infrastructure in Russia, where cybercriminals can operate with relative freedom due to the absence of extradition treaties and state tolerance.
Hospitals and clinics are particularly in focus of ransomware campaigns. The target selection is strategic: medical facilities can be pressured more quickly into paying ransom because downtime directly endangers lives. Attackers exploit this urgency to force payments.
For CISOs, this means that Russia serves as a safe haven for cybercriminals and complicates national or international law enforcement. Targeted network hardening, segmentation, and backup strategies are central defensive measures against this threat.
Source: www.heise.de · Published June 24, 2026
Lumi AI News — AI-assisted curation pursuant to Article 50 EU AI Act. Paraphrasing and classification by Lumi News Pipeline v1.7.1.