In a notice to customers and suppliers, the organization said it had exhausted every available option before seeking insolvency protection. Managing director Johannes Zenglein described the filing as "one of the most difficult steps in our company's 37-year history." "The cyberattack of March 29, 2026, however, impacted our company to an extent that we could not fully compensate for despite our best efforts," Zenglein wrote. "The consequences resulted in a production outage of nearly six weeks and significant financial strain. These effects ultimately impacted our financial situation so severely that filing for insolvency became necessary."
Wow.
ZEGO did not disclose what kind of attack it suffered, whether ransomware was involved, who was behind it, or whether customer or employee data was compromised.
Wait a minute... ಠಿ_ಠ
GDPR states that if personally identifying information was compromised, the users must be notified. They can't just decide not to publish what happened. It's against the law.
This screams "upper management didn't make security a priority".
It seems the users are employees, if any data was stolen. You can notify users and still remain confidential.