Overview
- KVV said Wednesday that unknown actors injected malicious code into several of its public web properties, including kvvks.de, kvg.de, netzplusservice.de and pages for the Kasseler Bäder.
- Visitors to the affected pages were sometimes shown prompts to install software or change system settings that could have led to unintended malware installation if followed.
- KVV removed the injected code the same day and switched its sites to a reduced, contact-only presence while it brought in external IT‑forensics specialists.
- Early internal checks indicate KVV’s core IT systems were not compromised and there are no current signs of customer-data theft, but investigators do not yet know how many users, if any, were infected.
- The company has notified the Bundesamt für Sicherheit in der Informationstechnik, the Hessian data‑protection authority and local prosecutors, who are working with forensics teams to trace how the pages were altered and who is responsible.