LuxHawk articles explain the concepts needed to understand cybersecurity, data protection and digital hygiene. Each article defines a topic, explains its operational relevance and provides decision-making markers.
Three documented cases show that a cyberattack can cut off a building’s heating or electricity, sometimes without even targeting it. What a managing agent or property manager in Luxembourg can check right now with its contractors.
Two documented cases show how a KNX or Niagara installation exposed on the Internet turns against its owner: a building locked by a key set by the attacker, and the supervision system of a Google building read through a vulnerability patched nine months earlier. The article draws from them the checks to make in the contract, at handover of the works and over time.
Door controllers enlisted into botnets, hotel locks opened with a home-made device, key cards that could no longer be produced, lockbox codes that leaked: four documented cases between 2012 and 2026. What a co-ownership manager, a property manager or a company director in Luxembourg can take from them, step by step.
Mirai, Hikvision, Dahua and Verkada: four documented cases in which building cameras and door entry systems served third parties, or were watched by them. What a managing agent, a property manager or a company director in Luxembourg can take from them, from the factory password to the decision of the general meeting.
Four documented cases, from Target to Snexi, in which a heating contractor, a payment platform, a managed service provider or an inventory inspection provider exposed those who trusted them. What a managing agent or property manager in Luxembourg can take from them, from the contract to the transfer procedure.
Six documented cases, from the encrypted Swiss property management firm to the Luxembourg syndic fined by the CNPD, show what a co-ownership loses when its manager is attacked or lets its data leak. The steps that follow from them — tested backups, separated networks, minimised data, prepared communication and notification — are a matter of governance more than of IT.
A fake invoice that installs a remote-access tool on the accounts workstation, an email whose address differs by a single letter and which attaches altered bank details: two mechanisms documented by CIRCL and by the French courts. The article draws from them the measures that protect a co-ownership’s funds and recalls who still owes the money once it has gone.
