Cyberattack on Mindfactory: Passwords Reset

What happened

Hackers attacked the online hardware shop Mindfactory. The company has told its customers and the data protection authority. It has also filed a criminal complaint against unknown people. Mindfactory says it is now looking into how the attack happened. It has also closed the weak spot the attackers used. All customer passwords for the shop were reset as a precaution, so each customer must set a new one.

Key facts

• Mindfactory has belonged to the heise group since mid-2025. The takeover was in July 2025.
• Customers who ordered anything since the takeover will be informed.
• The attackers may have reached names, addresses, email addresses, phone numbers and encrypted passwords.
• Bank and credit card data is not stored in the shop system, so the company says it is not at risk. Payment companies store it.
• Mindfactory says it is not being blackmailed.

Some key terms

A password reset means the old password stops working. Users must make a new one to log in. Encrypted passwords are scrambled so that they cannot be read easily. A hash method is a way to scramble a password. Mindfactory says the new passwords will use an even more modern hash method.

Why it matters

Customers may now get fake emails, texts or calls that use their real contact details. The company warns people to be careful with unexpected messages that ask for personal data or ask them to open links or files. If you are a Mindfactory customer, change your password and be careful with unknown messages.

What to watch

• Results of the forensic investigation, which is a detailed study of how the attack happened.
• Any new findings. Mindfactory says it will inform customers if it learns more.
• Whether customers receive scam attempts using their contact details.