The Trojan could not cause any real damage due to the quick reaction of the employee. We were able to remove it very easily from our network layer.
We are now starting the isolation of the network and searching further files / folders and connections to the outside. Currently, we do not assume a data protection-relevant case, but we will still make a report today. The quick capping of the external connection could not harm relevant information.
All connected devices will be searched again from 4 p.m. onwards, provided that no further cases are found - we will confirm this case. However, we will not do any more work today due to the high security risk.
More information in a few hours.