DE — heise online

IT attacks with data leaks at notebooksbilliger and Pÿur

SecurityNovember 3, 20261 min read

Two German companies, the online shop notebooksbilliger.de and the internet provider Pÿur (known as Tele Columbus), have told customers that hackers attacked their IT systems. Personal data may have been taken.

What happened

Both companies sent emails to customers about cyberattacks on their company computer systems. notebooksbilliger.de says it found unauthorized access to its IT on October 12. It cannot yet rule out that bank account numbers (IBAN) were taken. It says there is no sign that passwords were affected. Pÿur says its sales and IT systems were attacked and that some data also seems to have been taken, including contract numbers, names and bank details.

Key facts and numbers

notebooksbilliger.de found the access on October 12.
According to media reports, a mid-sized five-figure number of customers may be affected.
Pÿur says the IT incident took place between mid-September and early October 2026.
notebooksbilliger.de says full credit card numbers and security codes are not stored in its systems, so they are not affected.
Both companies say they informed data protection authorities and filed criminal complaints.

Some background

Pÿur is the consumer brand of Tele Columbus AG. It runs its own network in many parts of Germany and sells internet connections such as DSL, fiber optic and cable. notebooksbilliger.de is an online shop that sells computers and electronics.

Why it matters

Stolen bank details and names can be used by criminals to trick people. Scammers may pretend to be a bank or an official office and ask for payments. Customers should watch their bank account closely in the coming months and be careful with unexpected messages, calls, or payment requests.

What to watch

Whether the companies confirm how many customers were affected.
Results of the investigation with outside IT forensic experts.
Any new phishing messages that use the company names.
Statements from German authorities such as the Federal Network Agency and the BSI.

Glossary

IBAN: An international bank account number that identifies a bank account.
Tele Columbus AG: A German company that builds and runs broadband networks; Pÿur is its brand for home customers.
BSI: Germany's Federal Office for Information Security, which protects computer systems and advises on cyber threats.

Cops bust botnet of 1.3M infected Android TV boxes

A coalition of security firms working with Japan's National Police Agency disrupted XCPE, a backdoor used to build a botnet of more than 1.3 million Android devices across over 200 countries. Google says Shenzhen-based hardware maker Videostrong Technology deliberately embedded the backdoor in device firmware and sold access to criminal affiliates. The disruption also took down command-and-control domains used to manage affiliate malware modules, which Google says could sever access to at least 10 million more compromised devices.

SecurityTechCrunchNov 3

Germany says lawmakers’ iPhones may have been hacked with spyware

Germany's federal cybersecurity office, the BSI, says members of the Bundestag and other unnamed notable people received Apple threat notifications warning their iPhones may have been targeted by government-backed spyware. Apple does not attribute attacks to specific governments or confirm that devices were compromised, so the BSI advises recipients to assume their devices may have been compromised. Apple said the latest batch of notifications went out to users in 99 countries.

SecurityThe RegisterNov 3

Token thieves costing companies $100K+ per day in illicit LLM charges

Criminals are hijacking corporate LLM access to run up unauthorized token charges that can exceed $100,000 a day, according to a Google Mandiant report. Some organizations saw cumulative charges reach $1 million before revoking intruders' access. The report describes this "LLMJacking" tactic as steadily increasing over the past two years, with attackers also using stolen third-party API keys and specialized roles for access and monetization.