mittwald MCP server breach compromises 56 customer projects
German hosting provider mittwald experienced session token theft through its MCP server and unauthorised access to mStudio customer projects, with 56 customer projects compromised. The company decommissioned the MCP server, revoked the tokens, and temporarily suspended control panel logins, SSH access, extensions, and orders. On 12 November, a further cyber-attack targeting the company’s website prompted another suspension of access to the customer centre, mStudio, and SSH.
Key facts
- Affected organisation
- mittwald
- Incident type
- Hacking & intrusion
- Occurred / detected
- Not confirmed
- Scale of damage
- 56 customer projects compromised and user session tokens stolen
- Cause / method
- Session token theft and unauthorised access to customer projects through an MCP server vulnerability
- Location
- Germany
Timeline
- Unauthorised access to mStudio through the MCP server was confirmed, and control panel logins, SSH access, and other functions were temporarily suspended for investigation and response.
- It emerged that user session tokens had been stolen and misused to access projects, and that the MCP server had been decommissioned and the tokens revoked.
- A further cyber-attack targeting the company’s website prompted another suspension of access to the customer centre, mStudio, and SSH.
- It emerged that 56 customer projects had been compromised.
4 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.