A cyberattack disrupted ordering and shipping at Loxone, a building-automation supplier with U.S. headquarters in Pennsylvania, while installed systems controlling customers’ buildings continued operating, the company said.
The Austrian company’s U.S. website carries the incident updates. Its American headquarters are in Garnet Valley, near Philadelphia, and it works with installers supplying homes and commercial buildings.
Loxone said order processing and shipping from its headquarters had resumed, but customers should continue ordering by email. It had previously warned of delivery delays.
The company said it detected the attack Sunday, isolated affected systems and began restoring them with outside forensic specialists. Internal customer-management systems holding partner information and applicant data were affected.
Attackers also took business-customer data, President Florian Wöss told Austrian broadcaster ORF. “We know that the attack came through one of our web servers,” he said, translated from German. Loxone is still determining the precise data scope.
Loxone said the controllers in customers’ buildings store credentials locally and operate independently of its corporate services. The company said those devices were unaffected.
Loxone also said its Remote Connect and Exosphere services were unaffected. Technical support, remote video for its intercom and its Radio service had returned as the company worked through recovery.
Chip in once
If this reporting helped you, a one-time tip helps cover hosting, tools and future investigations.
Support us monthly
A small monthly pledge keeps independent coverage and our reader tools online for everyone.
An extortion message attributed to a group calling itself Samurai claimed that more than 200 gigabytes had been copied and encrypted, Krone reported. It threatened publication Thursday unless a payment agreement was reached. The claimed volume and encryption remain unverified.
The shipping interruption has a parallel in Data I/O’s August 2025 ransomware incident in Washington. The electronics manufacturer reported disrupted manufacturing, shipping and receiving after isolating affected systems and taking some technology offline.
Loxone said it had notified partners by email and would contact people whose data was affected. It was still restoring other systems and had not declared full recovery.
