Porsche
German sports-car manufacturer headquartered in Stuttgart.
Last refreshed: 20 May 2026 · Appears in 1 active topic
What data does Stuttgart city hall hold about Porsche that could matter in a ransomware extortion?
Timeline for Porsche
Mentioned in: Rhysida names Stuttgart on leak site
Cybersecurity: Threats and Defences- Where is Porsche AG headquartered?
- Porsche AG is headquartered in Zuffenhausen, a district of Stuttgart, in the German federal state of Baden-Württemberg.
- Was Porsche affected by the Rhysida attack on Stuttgart in May 2026?
- Porsche was not identified as a victim. Rhysida's claim was against Landeshauptstadt Stuttgart's municipal government. Porsche's own IT infrastructure is separate from city systems, though geographic proximity creates an assessed indirect risk via municipal contractor and planning data.
Background
Porsche AG is a German sports-car and performance-vehicle manufacturer headquartered in Zuffenhausen, Stuttgart, Baden-Württemberg, producing the 911, Cayenne, Macan, Taycan, Panamera, and Boxster model lines. Porsche listed on the Frankfurt Stock Exchange in September 2022 in what was at the time Europe's largest IPO in a decade, raising approximately €9.4 billion. Volkswagen Group retains a majority stake via Porsche SE; Porsche AG reported €40.5 billion in revenue for fiscal year 2024 and employs approximately 40,000 people. The Zuffenhausen plant is one of the most technologically sophisticated automotive manufacturing facilities in Europe, producing largely by hand.
Porsche is referenced in the cyber-threat context because its global headquarters is in the Stuttgart metropolitan area, making the Rhysida ransomware claim against Landeshauptstadt Stuttgart on 19 May 2026 a claim against the city government that administers Porsche's HQ municipality. Porsche's own IT and operational-technology infrastructure is separate from Stuttgart's municipal systems. The connection is civic and geographic: city-government networks hold data on major employers through contractor, permitting, planning, and public-service functions. Porsche is not identified as a victim and has made no disclosure relating to the Rhysida claim.
Porsche operates a connected-vehicle ecosystem and digital services business that represents a growing part of its revenue model, creating its own cyber-risk surface independent of the Stuttgart municipal incident. The company has invested in cyber-security capability as part of its EV and digitalisation programme.