Germany: 16 million email accounts may be compromised

Summary:Botnets responsible, says the country's IT security agency.

In Germany, around 16 million email addresses, user names, and passwords may have been stolen, according to an announcement on Tuesday from the country's Federal Office for Information Security (BSI).

The theft was discovered through an analysis of botnets — collections of malicious software that an attacker can use to carry out tasks like collecting user information or sending spam.

Because an investigation is ongoing, the office has not released any additional information about who was responsible, or how long the attack had been going on.

The Federal Office of Information Security has set up a website where people can check if their email accounts have been compromised. Concerned internet users can submit their email address, after which they will receive a four-digit PIN number. If the email address has been compromised, the user will receive an email with a matching PIN number.

Although the office has a list of all 16 million email addresses, German law says that it cannot contact these users directly without explicit permission. The site has reportedly crashed at least once since coming online, presumably due to overwhelming demand.

The office has advised those with compromised email addresses to change their passwords to "social networking sites, online shops, email accounts and other online services" and check their computers for malware and viruses.

Topics: Security, EU


From the day he brought home a modem and dialed in to a local BBS in 1991, Michael has been obsessed with technology and how it enables collaboration. He has a master's degree in journalism from UC Berkeley, and has worked in and around the technology start-up scenes in San Francisco and Berlin.

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.

Related Stories

The best of ZDNet, delivered

You have been successfully signed up. To sign up for more newsletters or to manage your account, visit the Newsletter Subscription Center.
Subscription failed.