The Loxone Cyberattack and Miniserver Update: A Guide for Cork Homeowners

The Loxone cyberattack of October 2026 hit the company's own office systems, not the Miniservers in people's homes, but it has been followed by a critical Miniserver security update and stricter rules for remote access. For Cork homeowners with Loxone, the job now is simple: update to 17.3.11.10, change any password that has been shared, and make sure the app keeps working after 1 December 2026.

Here is a plain summary of what has happened and what to do. The facts come from Loxone and from the reports linked below. If you would like us to handle it, our Loxone Miniserver update service in Cork covers everything in this post.

What happened in the Loxone cyberattack

Loxone, the Austrian building automation maker, found attackers in its internal IT on Sunday 18 October 2026. It replaced the front page of its website with a statement, isolated the affected systems, brought in outside forensic specialists and informed the authorities.

According to Chiptron, which pieced together Loxone's statements on 23 October, the attack came through one of the company's web servers and a group called SAMURAI claimed responsibility, saying it took around 200 GB of data. Loxone has said the data mainly covers contact details for partner companies, technical support requests and job applicants, that some of it is out of date, and that bank and card details were not affected.

What the Loxone cyberattack did not touch

This is the reassuring part. A Loxone Miniserver runs on its own, inside the house, with its user accounts stored on the device. It does not need Loxone's servers to switch a light or run the heating. Loxone says the Miniserver, Remote Connect, Exosphere and its other services were not affected and that installations kept running throughout. It also says it checked its software code and that it was not compromised.

On everything reported so far, the attack did not give anyone access to Cork houses. What the attackers may have gained is enough real contact information to send convincing emails.

The new Miniserver security update

A few weeks later, on 10 November 2026, Loxone released Miniserver version 17.3.11.10 as a critical security update. Loxone found the flaw through its own security checks: a vulnerability that allows repeated restarts of the Miniserver to be triggered over the network. The update is free and Loxone asks for every Miniserver to be updated immediately.

Until further notice, Loxone has made the Miniserver web interface unreachable through Remote Connect, and it now blocks anyone who sends an unusually high number of connection requests. The Loxone App and Loxone Config are not affected and keep working remotely.

Remote access after 1 December 2026

Loxone has also changed the rules for Remote Connect, the free service the app uses when you are away from home. From 1 December 2026 it needs Miniserver version 17.2.10.21 or later. After that, every new release gives you four weeks to install it before Remote Connect requires it.

That matters in Cork, with its family homes, larger houses around the harbour and holiday homes further west that can stand empty for weeks. A Miniserver left behind loses Remote Connect and Loxone Cloud DNS, so checking the heating or the alarm from your phone would need port forwarding or a VPN instead.

A checklist for Cork Loxone owners

1. Check your version in the Loxone App or Loxone Config.
2. Back up the configuration. Loxone points out that its automatic update does not make a backup.
3. Update to 17.3.11.10 and let the Miniserver restart.
4. Walk through the house: lights, heating, blinds, gates and any access control.
5. Change the administrator password if it was ever sent by email or in a support request.
6. Remove old accounts, including those of previous owners or installers, and give service technicians their own temporary login.
7. Be wary of emails about your Loxone system. Loxone does not ask owners for their password by email, phone or text.
8. Test the app on mobile data to confirm Remote Connect works.

When to call for help

If you do not have the administrator login, if the update fails, or if your original installer is no longer trading, we can help. We restore access first, then back up, update and tidy the users and passwords. Remote work is charged at €110 an hour plus VAT and a visit is €440 plus VAT for up to 4 hours, as set out in our smart home cost guide. To keep the Miniserver within Loxone's four week window from now on, ask about 1Install Care. Our Cork page covers the rest of what we do locally, and the national Loxone Miniserver update page has the full detail.

Questions we are often asked

Should I stop using Loxone after the cyberattack?

There is no sign that home systems were reached. The sensible response is to update the Miniserver, change shared passwords and watch out for phishing, not to rip the system out.

How do I spot a fake Loxone email?

Genuine Loxone emails come from loxone.com, but Chiptron reports that the attackers sent at least one message from a real loxone.com address, so the sender alone proves nothing. Loxone will never ask for your password. Treat any request for login details, payment to a new account or an urgent download with suspicion.

Does the 17.3.11.10 update fix the cyberattack?

No. They are separate. The update fixes a network restart vulnerability Loxone found in the Miniserver; the attack was on Loxone's company systems.

My holiday home is empty for weeks. What if I miss an update?

From 1 December 2026, a Miniserver below 17.2.10.21, or one that has not installed a new release within four weeks of it coming out, loses Remote Connect. An aftercare plan that installs each release for you avoids that.

Book a Loxone Miniserver update or call our Cork office on 021 202 8107.