The ransomware incident targeting werkstoff-service.de in Germany involved Threat Actor m3rx and reportedly included data theft of 1.82 TB across 1,719,610 files, with the group using the contact +49 2013168440. W.S. Werkstoff Service GmbH, an Essen-based material engineering and non-destructive testing services provider serving industries including rail, was impacted by the attack. #Germany
Incident Details
- Victim: werkstoff-service.de
- Sector: Manufacturing
- Country: DE
- Actor: m3rx
- Source: http://4k6plf4h2cm2nco6ae3inrsxnmqgl6lllmwefydhnlcq4tuhwbj4qpad.onion#werkstoff-service.de
- Discovered: 2026-06-11T17:56:53.777336+00:00
- Published: 2026-06-11T17:56:31.286996+00:00
Information
- Specializes in material engineering services, including material testing, damage analysis, and professional training in material technology.
- Provides accredited inspection services and consulting for a wide range of industries, with a strong focus on the railway sector.
- Supported by an expert team of chemists, physicists, and engineers delivering high-quality and innovative solutions.
- Offers certified retraining and qualification programs in material testing and non-destructive testing.
- Based in Essen, Germany, and serves clients globally.
- Stolen data: 1.82 TB across 1,719,610 files.

Disclaimer: This post is based on public claims made by the ransomware group "m3rx". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.