CYBERSECURITYTRACKER
Permanent story citation

Attack on email hosting provider for German far right party AfD exposed 345k accounts

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 11467

As cited

Copy frozen at (site build).

breaches incidents

Attack on email hosting provider for German far right party AfD exposed 345k accounts

Hackers compromised the email hosting provider for Germany's Alternative for Germany (AfD) political party in September, exposing more than 345,000 email addresses and over a terabyte of confidential data including attachments. The stolen emails were published on an activist website that used artificial intelligence (AI) to generate summaries organized by topic, leading to public disclosures about party members' communications. AfD acknowledged the breach on October 20 and disputed the AI-generated summaries as lacking context, though it has not specifically refuted the authenticity of the raw email files.

Why it matters: Political parties and other high-value organizations using third-party hosting services face exposure to attacks on poorly secured infrastructure; practitioners should review WordPress deployments and hosting provider access controls for similar vulnerabilities.

VendorsWordPress
Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

breaches incidents

Attack on email hosting provider for German far right party AfD exposed 345k accounts

Hackers compromised the email hosting provider for Germany's Alternative for Germany (AfD) political party in September, exposing more than 345,000 email addresses and over a terabyte of confidential data including attachments. The stolen emails were published on an activist website that used artificial intelligence (AI) to generate summaries organized by topic, leading to public disclosures about party members' communications. AfD acknowledged the breach on October 20 and disputed the AI-generated summaries as lacking context, though it has not specifically refuted the authenticity of the raw email files.

Why it matters: Political parties and other high-value organizations using third-party hosting services face exposure to attacks on poorly secured infrastructure; practitioners should review WordPress deployments and hosting provider access controls for similar vulnerabilities.

VendorsWordPress
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary