Mittwald Cyberattack Exploits AI Interface to Compromise 56 Projects
Mittwald Webhosting Breach Affects 56 Projects
Fifty-six customer projects were compromised in a cyberattack on German web host Mittwald CM Service, ms-aktuell.de reported.
The breach forced the Espelkamp-based company to investigate affected systems, take critical interfaces offline, and restrict administrative access for users.
The Tech TL;DR:
- An attacker exploited a vulnerability in Mittwald’s MCP-server interface used for connecting AI assistants to the mStudio platform.
- Session tokens for the interface were exposed, prompting the company to revoke them and force password resets alongside mandatory two-factor authentication.
AI Interface Vulnerability Exploited in October
The security incident originated from a vulnerability in the MCP-server, a technical interface that lets customers link the mStudio administrative platform with AI assistants. According to ms-aktuell.de, the attacker first tested the flaw on October 21, 2026, before executing a targeted exploit on October 27 to breach hosting systems.
The attacker extracted session tokens from users of the affected interface. These tokens granted access to specific functions within an existing session, though regular passwords were not exposed, ms-aktuell.de reported. Mittwald confirmed that all compromised session tokens have been fully revoked.
Forensic Investigation and Disconnected Services
Mittwald detected unusual activity on November 4 and immediately shut down the MCP-server while deploying internal specialists and external IT forensics. By November 6, the company had forensically examined 56 compromised projects, finding no evidence of further incursions or ongoing attacker activity on its systems.
Websites showing indications of unauthorized access were proactively deactivated, with several of those blocks remaining in place according to a status report published on November 7. Separate customer centers and independently managed websites were not affected by the incident, though system restarts caused temporary outages of ten to 15 minutes on November 6.
# Recommended remediation steps for affected administrators
passwd mStudio_user
# Verify active SSH keys and authorized tokens
cat ~/.ssh/authorized_keys
# Rotate all API credentials stored within hosting project environments
Restricted Administrative Access and Customer Notifications
Administrative logins to mStudio, technical SSH access, and various extensions were disabled starting November 5 as a precautionary measure. Orders and modifications for existing hosting services also faced temporary restrictions, preventing web agencies from managing their projects normally.
By Saturday, November 7, Mittwald restored access to mStudio logins and SSH connections, while certain websites remained offline pending security reviews. Affected customers received direct email notifications detailing mandatory security steps, including changing passwords, activating two-factor authentication, and renewing external API keys.
Mittwald reported no evidence that stolen data had been published on relevant internet platforms, though investigations into whether specific project contents were accessed continue. The company informed local police, the Federal Office for Information Security, and the responsible data protection authorities about the breach.
MCP-Server Remains Offline Amid Suspected Use of AI Tools
The MCP-server interface utilized in the attack is offline indefinitely, while audits determine if it will be restored. Based on the velocity of individual attack steps, Mittwald suspects the deployment of automated AI tools during the operation, though independent confirmation of that assessment was initially unavailable.
The incident highlights the operational risks inherent in auxiliary management interfaces that grant automated applications direct access to hosting infrastructure. Mittwald announced plans to release a more detailed technical breakdown of the attack vector in the coming week.