Overview

• In early August 2025, insolvency proceedings were opened for 24 logistics GmbH, serviceBYphone GmbH and a third Einhaus unit while a fourth could not file due to lack of assets
• Investigators confiscated a six-figure cryptocurrency ransom paid after the spring 2023 attack, but Einhaus has yet to recover the funds
• A ransomware breach in spring 2023 encrypted all corporate systems and halted operations despite the company’s payment of the demanded crypto ransom
• Ongoing system failures post-ransom led to mid seven-figure revenue losses, the layoff of almost all 170 employees and the sale of a business property for emergency liquidity
• Einhaus’s collapse exemplifies a wider trend of German mid-sized firms forced into insolvency by cyber extortion