Loxone: cyberattack hits the building automation company's internal systems
Loxone, the Austrian company that makes automation systems for homes and buildings, has announced that its internal systems were hit by a cyberattack.
What the company has confirmed
- The attack was detected on 18 October 2026.
- Internal systems were affected, including the systems holding partner company and job applicant data.
- According to the company, customer installations are safe: access credentials are stored only on the Miniserver installed in the building, and the Miniserver, Remote Connect and Exosphere services are not affected.
- The affected systems were isolated and the investigation is being carried out with external specialists. The authorities have been informed.
- Services are disrupted: orders are taken by email and deliveries are slower.
What is still unknown
The company has not confirmed whether data was stolen: it is still checking which data is affected, and the people concerned will be contacted by email. The method of entry has been identified but is not being made public. An alleged extortion message speaks of about 201 GB of copied data, but this claim has not been verified.