Information

21-05-2026

Dear Customers and Suppliers,

We would like to provide a brief update on the current situation.

We have still not been able to identify any evidence of a data breach. Our technical specialists have reviewed and monitored the situation, and no signs have been found that data has been leaked. Naturally, we will continue to monitor the situation closely as an additional precautionary measure.

At the same time, our systems are gradually being restored, and the most critical functions have either been re-established or are in the process of returning to normal operation. This means that we are once again gradually able to handle deliveries, order processing, invoices, payments, and other inquiries.

However, as we have had limited access to systems and data for a period of time, a backlog of tasks has accumulated. We are working diligently to address this as quickly and responsibly as possible.

We therefore ask for your understanding and a little extra patience if response times remain longer than usual, or if it takes slightly longer to process specific tasks and inquiries.

We apologize for any inconvenience the situation may have caused and thank you for your understanding and cooperation.

Kind regards,
Petersen Tegl A/S

***

06-05-2026

Dear customer of Petersen Tegl A/S 

Petersen Tegl A/S wishes to inform you that we have been affected by a cybersecurity incident which may involve personal data relating to you/your employees. This communication serves as a preliminary notice. The investigation into the incident is ongoing and we do not yet have all relevant information at our disposal. We will provide you with a further update as soon as additional information becomes available.

What happened?

On 28 April 2026, a ransomware attack targeting a data processor in Denmark was identified. As part of this attack, IT systems were encrypted and rendered inaccessible. The incident is still under investigation, and external IT security specialists are assisting with the response.

(Information continues further below)

***

Update 08-05-2026
(Following update of 06-05-2026)

No leakage of the stolen data has been detected.

The technical specialist team we are working with will continue to monitor and reconfirm that they do not find any evidence that your data has been leaked.

The technical experts assisting us in this matter are working intensively to restore all systems, and we hope and plan to restart the most critical systems next week and restore normal operations regarding deliveries, order processing, and payments.

A lot has been learned from and during this outage, and a strengthened IT setup is now being prepared, incorporating new initiatives and the latest IT security measures.

***

(Continuation of message 06-05-2026)

What has happened?
We have suffered a data system outage, which means that a number of our systems and data are currently inaccessible to us, and that the confidentiality of our data has been compromised in a hacker attack. We are currently working to determine what has happened and which data may have been affected.

What does this mean for you as a customer or supplier?
Unfortunately, we know that some data has been copied by unauthorized third parties, but at this stage we cannot say with certainty whether your information is specifically among the affected data. We will continuously update information on our website.

For customers: For a period of time, you may experience difficulties contacting us through our usual channels, and deliveries, order processing, and response times may be affected.

For suppliers: For a period of time, you should expect that our normal processes for placing orders, delivery planning, invoice handling, and payments may be delayed or handled through alternative channels. A number of data sets, including supplier and order information, are currently unavailable to us while we work to restore our systems.

For the time being, we ask you to:
(i) contact us by phone regarding new orders or changes to existing orders, and
(ii) not assume that emails, payment requests, or requests to change account information appearing to come from us are necessarily genuine. Please verify them by phone through your usual contact person with us if you notice changes to our account details.

What are we doing now?
• We have isolated the affected systems to limit the incident.
• We have engaged external IT security experts to assist us in handling the incident.
• We have notified the relevant authorities.
• We are working around the clock to restore normal operations as quickly and safely as possible.

What should you be aware of and do?
As hackers are involved, it is possible that they may publish data on the “dark web,” where we have no control over the data. Since we do not know whether this will happen, it is a good idea to remain particularly vigilant in the coming period.

We recommend that you and your colleagues:
• remain extra cautious regarding emails, text messages, or phone calls claiming to come from us or our partners, and do not click on links or disclose information if you are in doubt,
• contact us at +45 7444 1236 if you receive suspicious inquiries or have questions regarding this notice, and
• share a link to this notice with colleagues whom you know work with us.

We apologize for the inconvenience this situation may cause and take it very seriously.

We will continue to keep you informed as we gain greater clarity about what has happened. The next update is expected to be published on our website on Friday, 8 May 2026.

With kind regards

Peter Bendtsen
CEO
Petersen Tegl A/S