• Statista has been affected by a cybersecurity incident – the internal analytics tool Metabase was attacked via a vulnerability in the application.
• The application was shut down immediately and affected customers were notified directly.
• The statista.com platform and all other customer-facing systems remain fully operational and are not affected by the incident.

Hamburg, Germany – Statista has been affected by a cybersecurity incident. Late in the evening on August 10, 2026, the German Federal Information Security Authority (BSI) alerted the company that it had appeared on the leak page of the ransomware group "Direwolf." Statista immediately activated its incident response procedures and engaged external forensic specialists to investigate the scope and nature of the attack. On the afternoon of August 11, 2026, forensic specialists confirmed definitive evidence of unauthorized access.

Based on current findings, the internal analytics tool Metabase, which aggregates data regarding the usage of Statista’s services from a small number of business customers, was attacked via a vulnerability in the application. Forensic analysis has further indicated that the affected tool contained GDPR-relevant personal information. Statista is committed to establishing the full scope of the data affected and will report new findings to the relevant authorities and affected parties as they emerge.

The application was shut down immediately upon confirmation of this finding, and the affected customers were notified directly. Moreover, the cybersecurity breach has been reported to the relevant authorities, and the data protection assessment is being conducted by Statista’s Head of Data Protection & CISO in close coordination with the competent supervisory authority.

Statista takes this matter very seriously and is treating the full and ongoing forensic investigation with top priority.

"The trust our customers and partners place in us is the foundation of everything we do. We deeply regret this incident and the concern it causes. We made the deliberate decision to communicate proactively and immediately, because we believe transparency is not optional, but an obligation to the organizations, governments, and institutions who rely on us," said Frederik Gronwald, Chief Customer Officer at Statista.

The statista.com platform and all other customer-facing systems remain fully operational and are not affected by the incident.

###

About Statista

Statista is one of the world's leading Data-as-a-Service (DaaS) companies for statistics, market data, and consumer insights empowering people globally to make fact-based decisions. With an extensive database of over 1.5 million statistics on more than 80,000 topics, statista.com provides high-quality, reliable and relevant data for international businesses, governments, research and educational institutions. Through APIs and MCP servers, Statista data can also be integrated directly into enterprise and software platforms, making trustworthy, high-quality information accessible wherever decisions are made.

Founded in 2007 in Germany, Statista now employs almost 1,200 people at 7 locations worldwide.