← All incidents
INC-1041 · Hafenkontor Hotel · Reception workstation 2
Front desk PC shows ransom message
criticalescalatedLocked or encrypted systems
Timeline
Oct 08, 10:47 PM UTC · J. Petersen
Incident reported, device unplugged.
Oct 08, 10:55 PM UTC · Night manager
Escalated to security partner.
Oct 08, 11:20 PM UTC · Nordwacht Cyber
Remote triage started.
Oct 09, 07:00 AM UTC · Nordwacht Cyber
Insurer pre-notification prepared.
Summary
Workstation displays encryption notice. Device isolated, manual check-in active.
Reported by J. Petersen (Reception)
Escalation
- manager
- security-partner
- insurer
- authorities