Skip to content
Welcome, thoughtbot's Giant Robots listeners!Start here
Landeskriminalamt Rheinland-Pfalz
AI-generated illustration
OrganisationDE

Landeskriminalamt Rheinland-Pfalz

Rhineland-Palatinate's central criminal police authority.

On 20 October, Landeskriminalamt Rheinland-Pfalz joined five US, German and UK agencies in attributing at least 600 victims to the SafePay ransomware group.

Last refreshed: 22 October 2026

Key Question

Will the SafePay advisory move operators to patch years-old entry flaws?

Timeline for Landeskriminalamt Rheinland-Pfalz

#15 20 Oct

Six agencies tie SafePay to old flaws

Cybersecurity: Threats and Defences
View full timeline →

Background

Landeskriminalamt Rheinland-Pfalz is the central criminal police authority for the German state of Rhineland-Palatinate. Based in Mainz, it coordinates and supports crime prevention and investigation across the state. Its remit includes specialist investigations, analysis and central services that local police units cannot provide alone.

The authority also operates a Zentrale Ansprechstelle Cybercrime. This unit serves as a central contact for companies and institutions affected by cybercrime. The arrangement connects private organisations with the state's criminal police expertise when an incident requires specialist support. The English name Rhineland-Palatinate State Criminal Police Office and the shorter form LKA Rheinland-Pfalz both refer to the same authority.

Key Issues
Ransomware response

The LKA maps SafePay access

Landeskriminalamt Rheinland-Pfalz joined five agencies from Germany, the United Kingdom and the United States in a SafePay advisory on 20 October. The signatories attributed at least 600 victims to the ransomware group and named five initial-access flaws disclosed between 2020 and 2024.

The LKA's joint warning highlighted that CISA had already catalogued every flaw as exploited for between two and three years. It connects the authority's state-level business contact role with international evidence about how ransomware enters organisations. Two of the named weaknesses affect backup servers, placing recovery infrastructure inside the initial-access problem.

Common Questions
What is Landeskriminalamt Rheinland-Pfalz?
It is the central criminal police authority for Rhineland-Palatinate, coordinating and supporting crime prevention and investigation across the German state.Source: Polizei Rheinland-Pfalz
Where is Landeskriminalamt Rheinland-Pfalz based?
The authority is based in Mainz, the capital of Rhineland-Palatinate.Source: Polizei Rheinland-Pfalz
How does the LKA Rheinland-Pfalz help cybercrime victims?
Its Zentrale Ansprechstelle Cybercrime acts as a central contact for companies and institutions affected by cybercrime incidents.Source: Polizei Rheinland-Pfalz
What was the LKA Rheinland-Pfalz's role in the SafePay advisory?
It co-signed joint advisory AA26-293A, which described SafePay's activity, initial-access vulnerabilities and defensive measures.Source: CISA
Source Material

Written with AI from Lowdown's published reporting. Not individually reviewed by an editor. Updated 22 October 2026. Editorial standards.