Data Breach

2 stories

Society
Cybersecurity
Malware on Luxembourg's state IT system exposed government device data
Malware that sat undetected for about a month on the CTIE's mobile-device management platform let an external actor access a list of government device users' details. Officials isolated the system, briefed the cabinet and said no citizen data was affected — a fresh test of Luxembourg's cyber-resilience.
By Camille Reuter28 June 2026
Society
Cybersecurity
Malware breached Luxembourg's state device system for weeks
An external actor used memory-resident malware on the State IT Centre's mobile-device-management platform to access an inventory of roughly 4,850 government smartphones and tablets, along with officials' names, work numbers and emails. Content on the devices and all citizen data were untouched. The breach, active from late January until its detection on 26 February 2026, comes as public administration becomes the EU's most-targeted sector.
By Marc Weber26 June 2026