German Phone Repair and Insurance Provider Collapses After Ransomware Attack
The Einhaus Group, a German mobile phone repair and insurance enterprise, has begun insolvency proceedings for several of its businesses following severe financial difficulties caused by a ransomware attack in 2023. Founder Wilhelm Einhaus confirmed that three of the group’s 13 companies, including a mobile insurance firm, logistics service, and 24-hour repair network, have entered insolvency. The company was once a significant player in the industry, partnering with major telcos like Deutsche Telekom and 1&1, and generating up to €70 million annually.
The Royal ransomware group infiltrated the company’s systems, printing messages across office devices to declare control. Staff were locked out, operations were frozen, and the company eventually paid a high six-figure ransom in cryptocurrency. However, the German public prosecutor’s office seized the ransom as part of a criminal investigation and has not returned it. This lack of restitution, according to Einhaus, derailed recovery efforts. The group tried to recover through asset sales, investment liquidation, and drastic downsizing - from over 100 employees to just eight - but it wasn’t enough.
Einhaus Group is one of many businesses brought down by ransomware in recent years. Other victims include UK logistics firm Knights of Old, which collapsed after an attack by the Akira group, and Stoli’s U.S. arm, which faced $84 million in debt following a cyberattack. Finnish psychotherapy clinic Vastaamo also went bankrupt after hackers exploited sensitive patient data for blackmail.
These growing cases highlight the critical importance of end-to-end cybersecurity monitoring with a platform like NIKSUN. Without comprehensive, continuous threat detection and rapid incident response capabilities, organizations remain vulnerable to breaches that can cause devastating financial losses, irreversible reputational damage, regulatory penalties, lawsuits, and even total collapse. Cybersecurity must be treated as a foundational pillar of modern business strategy - not a reactive afterthought. Read more about this story on our LinkedIn page
The Royal ransomware group infiltrated the company’s systems, printing messages across office devices to declare control. Staff were locked out, operations were frozen, and the company eventually paid a high six-figure ransom in cryptocurrency. However, the German public prosecutor’s office seized the ransom as part of a criminal investigation and has not returned it. This lack of restitution, according to Einhaus, derailed recovery efforts. The group tried to recover through asset sales, investment liquidation, and drastic downsizing - from over 100 employees to just eight - but it wasn’t enough.
Einhaus Group is one of many businesses brought down by ransomware in recent years. Other victims include UK logistics firm Knights of Old, which collapsed after an attack by the Akira group, and Stoli’s U.S. arm, which faced $84 million in debt following a cyberattack. Finnish psychotherapy clinic Vastaamo also went bankrupt after hackers exploited sensitive patient data for blackmail.
These growing cases highlight the critical importance of end-to-end cybersecurity monitoring with a platform like NIKSUN. Without comprehensive, continuous threat detection and rapid incident response capabilities, organizations remain vulnerable to breaches that can cause devastating financial losses, irreversible reputational damage, regulatory penalties, lawsuits, and even total collapse. Cybersecurity must be treated as a foundational pillar of modern business strategy - not a reactive afterthought. Read more about this story on our LinkedIn page