The online booking system of Miniatur Wunderland Hamburg fell victim to a cyberattack, resulting in unauthorized access to payment transaction information. Investigations into the incident are ongoing.
Cybercriminals inserted malicious code into a component of Miniatur Wunderland’s online ticket booking system. According to a company spokesperson, this breach did not involve stealing credit card data stored locally, as no payment data is kept on their servers.
“Unknown individuals have inserted malicious code into a module of our online ticket booking system. No credit card data stored with us was stolen—we do not store any payment data locally.”
The attackers manipulated the data traffic between Miniatur Wunderland’s server and the payment service provider, which allowed the malicious code to intercept sensitive data during transactions.
After discovering the intrusion, Miniatur Wunderland swiftly removed the malicious code and replaced the compromised systems within 72 hours to prevent further damage.
“All systems were immediately cleaned after confirmation of the initial suspicion and replaced with completely new systems within 72 hours.”
Miniatur Wunderland was targeted by cybercriminals manipulating payment data traffic in its booking system, prompting a quick company response and ongoing investigations to secure visitor data.