Important information about a cyberattack on LOXONE

Latest updates

1. 19 October 2026, 22:02 CEST

   Update: Step by step, we’re back for you.

   We are continuing to bring our systems back up, with checks at every stage, and there is good news: the Intercom’s remote video function is working again, LOXONE Radio is available again, and our technical support can be reached again from now on at support@loxone.com.

   Until further notice, you can send urgent orders by email to orders@loxone.com. Unfortunately, deliveries will take a little longer. We are working flat out to get our logistics running safely again as quickly as possible.

   We have also informed our LOXONE Partners about the current status by email. Please check your inbox.

   As a reminder: buildings with a LOXONE Miniserver are secure. User and access credentials are stored exclusively locally on the Miniserver, not at LOXONE. Miniserver, Remote Connect and Exosphere are not affected.

   Our team continues to work around the clock to bring all systems safely back into operation. Thank you for your patience and support. We will keep you informed transparently.

2. 19 October 2026, 13:01 CEST

   Update on the cyberattack on LOXONE

   My building, my data: buildings with LOXONE are secure. User and access credentials are stored exclusively locally on the Miniserver, not at LOXONE. Miniserver, Remote Connect and Exosphere are not affected.

   What we are doing:

   • Since early Sunday morning, a team of 25 people – IT security experts, developers, the owners and top management – has been working around the clock in shifts.
   • All affected systems were isolated immediately. We have identified the attack vector and confirmed it together with external IT forensics specialists.
   • We are now bringing our systems back up step by step, with checks at every stage, so that we can be there for our customers as usual.
   • This morning we briefed all employees on the current situation in a town hall meeting and gave clear instructions on how to handle the situation.

   Internal company systems are affected, in particular our CRM systems containing data on our partner companies, as well as applicant data. We are currently checking exactly which data is affected. We will inform those affected directly by email.

   For security reasons, we are not describing the attack vector publicly. Thank you for your understanding.

   Thank you for the strong support from our community. We will keep you informed transparently.