Loxone
ModerateConfirmedIndustry
Loxone, an Austrian building-automation company, detected an intrusion into its internal systems on 18 October 2026. On 19 October it stated that its CRM systems, which hold data on partner companies, and applicant data are affected. The company says it is still determining exactly which information is concerned, has notified the authorities and will contact affected people directly by email. A group calling itself Samurai claims to have copied 201.6 GB of data; Loxone has not confirmed that volume, and says its Miniservers, Remote Connect and Exosphere are not affected.
Contact and professional details of partner contacts or applicants could be used for targeted phishing impersonating Loxone.
- Disclosed on
- October 19, 2026
- Incident dated
- October 18, 2026
- Sector
- Industry
- Country
- Austria
- Cause
- Undisclosed
Exposed data
- Employment data
- Other personal data
You are only affected if you had an account or an order with this organisation.
What you can do
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.
Sources
- Cyberattaque contre Loxone : 201,6 Go revendiqués, le CRM et les données de candidats touchésCyberattaque.org
- Information zum CyberangriffLoxone
- Sicherheitsvorfall bei Loxone (18. Okt. 2026)Borns IT- und Windows-Blog
- Sicherheitsvorfall 2026: Cyberangriff auf Loxone - Interne Systeme betroffen, Kunden sicherMeinBezirk.at
Entry built from the cited sources after a corroboration check, then reviewed before publication. Spotted an error, or have a correction? Write to us and the entry will be fixed. Contact