TeamViewer failed to publicly disclose a cyberattack by Russian hackers in accordance with WpHG requirements, for which BaFin imposed an administrative fine.
Starting in September 2024, the Cyber Resilience Act mandates the reporting of security vulnerabilities within 24 hours to authorities, requiring fundamentally changed incident response processes.
The BSI clarifies reporting obligations for cyberattacks and establishes binding standards for organisations subject to reporting requirements in Germany.
