Event 56d1c725-0ac8-4153-a696-aa22f1f4e60d

Healthy processed event from Hybrid War Tracker

Status: Healthy (Processed) Last Updated: 2026-02-18 Confidence: High Classification: Cyber & Information Warfare > Cyber Attacks > Attacks on critical infrastructure (energy, transport, hospitals) Country: Germany Where: Cyberspace Tag: cyberattack Tag: DDoS Tag: Deutsche Bahn Tag: critical infrastructure Tag: IT disruption Tag: Germany Aggressor Confidence: High
🕐
Event Time
1d ago
Created
16h ago
✏️
Updated
15h ago

Summary

Headline: Ongoing Problems at Deutsche Bahn Caused by Cyberattack

Short Summary: Deutsche Bahn has been suffering from continuing IT disruptions caused by a significant Distributed Denial of Service (DDoS) cyberattack that began on Tuesday, 18 February 2026 around midday. The attack, targeting Deutsche Bahn systems in waves, has led to problems with connection searches, ticket display, and completing bookings on both the Bahn-App 'DB Navigator' and the website bahn.de. Initially, Deutsche Bahn had indicated the issues were resolving, but later revoked that assurance and confirmed severe ongoing impacts. Deutsche Bahn is working closely with federal authorities but has declined to comment on the attack’s origins, emphasizing customer data protection and system availability as top priorities. The head of Germany's Federal Office for Information Security (BSI) described the incident as an unusually large-scale attack generating billions of requests per minute, highlighting the unprecedented dimension of the DDoS assault. The Federal Ministry of the Interior refrained from commenting on investigation status, citing the very early phase of inquiry.

Extended Summary: Deutsche Bahn has been suffering from continuing IT disruptions caused by a significant Distributed Denial of Service (DDoS) cyberattack that began on Tuesday, 18 February 2026 around midday. The attack, targeting Deutsche Bahn systems in waves, has led to problems with connection searches, ticket display, and completing bookings on both the Bahn-App 'DB Navigator' and the website bahn.de. Initially, Deutsche Bahn had indicated the issues were resolving, but later revoked that assurance and confirmed severe ongoing impacts. Deutsche Bahn is working closely with federal authorities but has declined to comment on the attack’s origins, emphasizing customer data protection and system availability as top priorities. The head of Germany's Federal Office for Information Security (BSI) described the incident as an unusually large-scale attack generating billions of requests per minute, highlighting the unprecedented dimension of the DDoS assault. The Federal Ministry of the Interior refrained from commenting on investigation status, citing the very early phase of inquiry.

Description

Deutsche Bahn is affected by a continuing cyberattack on its IT systems causing disruptions in connection search and ticketing. The attack is characterized as a DDoS (Distributed Denial of Service) attack targeting DB systems in waves, starting Tuesday midday, 18 February 2026. Deutsche Bahn initially reported no restrictions but reversed this after experiencing fresh issues in the morning, confirming severe ongoing impacts. The company emphasizes that defense measures are active and it is cooperating with federal authorities, though it refuses to comment on speculations regarding the attackers' motives or identity. The head of the Federal Office for Information Security (BSI) warned the attack involves billions of requests per minute, defining it as a large-scale, exceptional DDoS attack of unprecedented dimension. Both the Bahn website (bahn.de) and the DB Navigator app are affected, impeding customers from searching connections and completing ticket purchases. The Federal Ministry of the Interior has withheld commenting on the investigation, citing the early stage of proceedings.

Event Classification

Aggressor Event

Rationale

The article clearly states that Deutsche Bahn is targeted by a large-scale, ongoing cyberattack identified as a DDoS attack. The source includes official statements from Deutsche Bahn and the German Federal Office for Information Security (BSI), clearly attributing the event as a hostile aggressor action affecting critical transport infrastructure IT systems.