Wilhelm Kühne

Wilhelm Kühne is a German facility services company specializing in professional cleaning and building maintenance. Founded in 1950, it serves offices, schools, healthcare facilities, and commercial properties.

SUMMARY

We obtained a complete dataset from a German facility management and building cleaning company. The archive contains tens of thousands of files spanning from 2020 through September 2026, extracted from a network share on a single server. The data covers the full scope of business operations: financial records, employee contracts, tender submissions, customer billing, and internal planning documents.

The dataset includes over a thousand bank account statements, hundreds of invoices, and over a hundred employment contracts. Employee personnel files contain full names, and police clearance certificates identify specific individuals by name. Revenue tracking spreadsheets document monthly business performance across multiple branch locations.

Database backups from the SFirm financial system are present, representing the core banking and accounting infrastructure. The archive also contains tender documentation for public sector contracts, including pricing calculations and bid submissions.

WHAT WE HAVE

Personal Data

Employment contracts for over a hundred individuals are in the dataset, each containing full names, addresses, and contract terms. Personnel files include both current and historical contracts, with documents organized by individual employee names.

Police clearance certificates (Führungszeugnisse) are present for specific individuals, each document containing full names and personal identification data. These certificates were collected for employees assigned to sensitive locations such as educational institutions.

Employee planning spreadsheets document staff assignments across multiple branch locations, with scheduling and resource allocation visible for operational planning.

Financial Records

Over a thousand bank account statements document daily transactions across multiple accounts. The statements span from mid-2024 through 2026, providing a complete view of cash flows, payments received, and disbursements.

Revenue tracking spreadsheets break down monthly business performance by branch location and service type. These documents show pricing structures, customer payment patterns, and comparative financial data across years.

Hundreds of invoices document billing to customers, with corresponding payment records and account reconciliation documents.

Business Operations & Tender Documentation

Tens of thousands of calculation files document pricing for services across the customer base. These include bid calculations, cost breakdowns, and margin analysis for contract work.

Tender submission documents include pricing proposals, service specifications, and correspondence related to public sector procurement processes. Both successful and unsuccessful bids are represented, with detailed cost structures visible.

Service specification documents (Leistungsverzeichnisse) define scope of work for contracts across various customer locations, including municipal buildings, schools, and commercial properties.

Database Backups

Multiple SFirm database backups are present, representing the core financial and banking system. These backups span from 2023 through 2026 and contain the complete accounting and transaction data for the organization.

License keys for the SFirm system are included in the dataset.

Safety & Compliance Documentation

Safety data sheets document chemical products used in cleaning operations. Hazard assessment documents (Gefährdungsbeurteilungen) cover various work activities including maintenance cleaning, glass cleaning, and work at heights.

Tax clearance certificates and compliance documents for subcontractors are present, including certificates from health insurance providers and trade associations.

The full scope of the dataset has been catalogued and indexed.

WHO CAN RECEIVE THIS DATA

Regulators

Under GDPR (DSGVO), personal data of employees and individuals identified in police clearance certificates constitutes protected information. The dataset contains names, addresses, and employment details without apparent access controls.

German data protection authorities can receive notification of this breach. The presence of police clearance certificates—documents that contain sensitive personal identification data—alongside employment contracts creates a clear regulatory exposure.

Employees

Individuals whose employment contracts and police clearance certificates are in the dataset can be contacted directly. These documents contain names, addresses, and in some cases salary information and contract terms.

Competitors

Tender pricing calculations and bid submissions reveal cost structures and margin expectations for public sector contracts. This information provides insight into pricing strategies and competitive positioning for future procurement processes.

Customer lists with revenue breakdowns show the full client portfolio, contract values, and service relationships.

WHAT CAN HAPPEN

The dataset can be transmitted to the relevant German data protection authority (Landesdatenschutzbeauftragte) with documentation of the personal data exposure

Employees identified in contracts and police certificates can be notified directly that their personal information is part of the breach

Tender pricing and bid calculations can be shared with competitors operating in the same procurement spaces

Revenue data and customer lists can be used to identify and target the client base

SFirm database backups can be analyzed for complete financial transaction history

The full archive can be published, making all documents permanently searchable and accessible

Once published, this data becomes part of the permanent record—indexed, copied, and available for future due diligence, competitive intelligence, or targeted outreach by any party