Statement regarding recent reporting on May 2026 cyber incident

Following recent media reports concerning a cyber incident involving Christeyns, we would like to clarify what happened and what this means for our customers, partners and other stakeholders.

In mid-May 2026, Christeyns detected a cyberattack in which an attacker gained access to part of our IT environment using compromised login credentials. Our security monitoring detected the activity and the unauthorised access was promptly terminated. The accounts involved were blocked and the associated passwords were changed.

Following the incident, Christeyns engaged external cybersecurity specialists to conduct an independent forensic investigation. The forensic investigation found no evidence that company, customer or personal data was taken as part of the incident. The investigation also found no evidence that ransomware was deployed or executed in connection with the incident. Our business operations and services were not disrupted. No ransom demand was received and no ransom was paid.

Why is this being reported now?

The incident occurred in May 2026 and was contained and investigated at the time. The current media attention follows the publication of information by an external cybersecurity company concerning the cybercriminal group reported to be behind the attack. Christeyns is named in this reporting as one of several organisations affected.

The current reporting relates to the incident detected in May 2026. It does not concern a new cyber incident.

Measures taken

Cybersecurity is a key priority for Christeyns. Following the incident, we implemented additional security measures and continue to strengthen our IT environment and security processes.

Based on the completed forensic investigation, no evidence was identified that data belonging to Christeyns, our customers or other stakeholders was taken in connection with the incident. Our systems and services remain fully operational.

We continue to monitor our IT environment and remain committed to protecting our systems, data and services.

For questions regarding this statement, please contact Christeyns through our usual communication channels.