{"id":4105,"date":"2025-04-03T15:23:12","date_gmt":"2025-04-03T15:23:12","guid":{"rendered":"https:\/\/pragal-prinzenberg.de\/blog\/cyberangriff-it-compliance-risiken-schutzpflichten\/"},"modified":"2026-02-26T17:48:47","modified_gmt":"2026-02-26T17:48:47","slug":"cyberattack-it-compliance-risks-preventive-duties","status":"publish","type":"post","link":"https:\/\/pragal-rechtsanwaelte.de\/en\/blog\/cyberattack-it-compliance-risks-preventive-duties\/","title":{"rendered":"Cyberattack and IT Compliance \u2013 Criminal Risks and Preventive Duties for Companies"},"content":{"rendered":"\n<div class=\"wp-block-group has-base-background-color has-background\"><div class=\"wp-block-group__inner-container is-layout-constrained wp-block-group-is-layout-constrained\">\n<h2 class=\"wp-block-heading\">Key Takeaways<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Cyber attacks are among the&nbsp;<strong>greatest threats to companies<\/strong>, and defending against them requires not only technical but also&nbsp;<strong>legal preparation<\/strong>.<\/li>\n\n\n\n<li>Compliance with&nbsp;<strong>technical and organizational measures (TOM) under Art. 32 GDPR<\/strong>&nbsp;is a central component of any functioning IT compliance program. Many companies fail to meet these requirements, exposing themselves to&nbsp;<strong>fines of up to \u20ac20 million or 4% of annual turnover<\/strong>, as well as&nbsp;<strong>administrative sanctions<\/strong>. Neglecting prevention can also constitute&nbsp;<strong>embezzlement<\/strong>.<\/li>\n\n\n\n<li>The new&nbsp;<strong>EU NIS-2 Directive<\/strong>&nbsp;will introduce additional obligations and&nbsp;<strong>liability risks<\/strong>.<\/li>\n\n\n\n<li>Failure to&nbsp;<strong>report a cyber attack<\/strong>&nbsp;can result in fines of up to&nbsp;<strong>\u20ac10 million or 2% of annual turnover<\/strong>.<\/li>\n\n\n\n<li>Errors in dealing with&nbsp;<strong>ransomware attacks<\/strong>&nbsp;can have both&nbsp;<strong>liability and criminal consequences<\/strong>. Premature payment of ransom may constitute&nbsp;<strong>embezzlement to the detriment of the company<\/strong>. A&nbsp;<strong>well-documented and reasoned assessment<\/strong>is essential.<\/li>\n<\/ul>\n<\/div><\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>A cyberattack is now one of the greatest threats to companies \u2014 and at the same time, a challenge for IT compliance<\/strong>. It affects not only large corporations with complex IT structures but increasingly also medium-sized businesses and specialized service providers. This makes it all the more important that companies are prepared not only technically but also legally. Mistakes in handling an extortion case \u2014 whether in <a href=\"https:\/\/pragal-rechtsanwaelte.de\/en\/competencies\/compliance\/preventive-counselling\/\">prevention<\/a> or <a href=\"https:\/\/pragal-rechtsanwaelte.de\/en\/competencies\/crisis-management\/\">crisis management<\/a> \u2014 can lead to significant liability and criminal consequences.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Prevention is Mandatory<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Those who believe that a cyberattack is primarily an IT problem overlook the legal risks. The General Data Protection Regulation (GDPR) requires companies to ensure a level of security appropriate to the risk. The requirements for technical and organizational measures (TOM) under <a href=\"https:\/\/www.dsgvo-portal.de\/gdpr_article_32.php\" target=\"_blank\" rel=\"noreferrer noopener\">Art. 32 GDPR<\/a> are based on the state of the art and form a key component of any <a href=\"https:\/\/pragal-rechtsanwaelte.de\/en\/competencies\/compliance\/\">effective IT compliance<\/a> program. Encrypted data storage, strict access rights management based on roles, regular security updates, and multi-factor authentication are typically part of the basic expectations for an adequate security level. Many companies still do not fully meet these standards \u2014 posing significant GDPR compliance risks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The penalties for violations are severe. Infringements of Art. 32 GDPR are subject not only to administrative fines but also highlight how closely data protection, IT security, and IT compliance are intertwined. The GDPR provides for fines of up to 20 million euros or 4% of the company\u2019s global annual turnover. Furthermore, the ECJ clarified in its judgment of December 5, 2023 (<a href=\"https:\/\/curia.europa.eu\/juris\/document\/document.jsf;jsessionid=6CEA59407AC77363CE71BFCDC6ED2CF1?text=&amp;docid=280325&amp;pageIndex=0&amp;doclang=EN&amp;mode=lst&amp;dir=&amp;occ=first&amp;part=1&amp;cid=19666054\" target=\"_blank\" rel=\"noreferrer noopener\">Case C-807\/21<\/a>, Deutsche Wohnen SE) that companies can be held liable even without specific individual culpability.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In addition to fines, companies face administrative measures\u2014such as bans on processing personal data\u2014and compensation claims from affected individuals. All of this often strikes companies in the midst of crisis management. Prevention is therefore not just advisable\u2014it is a legal obligation.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">NIS-2 and New Liability Risks<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The new <a href=\"https:\/\/digital-strategy.ec.europa.eu\/en\/policies\/nis2-directive\" target=\"_blank\" rel=\"noreferrer noopener\">EU Directive NIS-2<\/a> imposes additional obligations on many companies, especially operators of critical services, but also many medium-sized enterprises in industry, trade, and services. Violations of reporting obligations or inadequate security concepts could soon open up broader grounds for liability. Although national implementation is still pending, affected companies should already prepare for stricter requirements.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Breach of Trust Due to Insufficient Prevention?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Little known but legally significant is the fact that failure to implement preventive measures can also be considered a criminal breach of trust (<a href=\"https:\/\/www.gesetze-im-internet.de\/stgb\/__266.html\" target=\"_blank\" rel=\"noreferrer noopener\">\u00a7 266 StGB &#8211; German Criminal Code<\/a>). This applies, for example, when a managing director, a Chief Information Security Officer, or a compliance officer breaches their fiduciary duty \u2014 at least with conditional intent \u2014 and causes damage to the company as a result. A violation of Art. 32 GDPR or the NIS-2 Directive alone may not be sufficient \u2014 there is often no direct financial link. However, the employment contract and the responsibilities it establishes for IT security may provide relevant points of reference here.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Direct damages can include operational downtime, third-party claims for damages, or the costs of restoring systems. The criminal significance of such cases remains disputed\u2014especially as intent is often lacking\u2014but the debate is gaining momentum.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Paying Ransom \u2013 Legal or Criminal?<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Notification Obligations under Art. 33 GDPR for Cyberattacks<\/strong><br>If a company becomes the victim of a cyberattack and faces extortion, the question quickly arises whether it is even permissible to pay ransom. Legally, this is complex. In principle, paying ransom is not prohibited. However, in certain circumstances, it can become criminally relevant.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For example, failure to report under <a href=\"https:\/\/gdpr-info.eu\/art-33-gdpr\/\" target=\"_blank\" rel=\"noreferrer noopener\">Art. 33 (1) GDPR<\/a> is subject to fines. Fines under <a href=\"https:\/\/gdpr-info.eu\/art-83-gdpr\/\" target=\"_blank\" rel=\"noreferrer noopener\">Art. 83 (4) (a) GDPR<\/a> can reach up to 10 million euros or 2% of annual turnover. There is no obligation to file a criminal complaint under <a href=\"https:\/\/www.gesetze-im-internet.de\/stgb\/__138.html\" target=\"_blank\" rel=\"noreferrer noopener\">\u00a7 138 StGB<\/a> (German Criminal Code).<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Breach of Trust and Internal Decision Processes<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Paying ransom can also entail risks. As part of IT compliance, it should always be reviewed before making such a decision whether all internal approval processes have been followed and all relevant assessment criteria have been documented. A ransom payment may be considered a breach of trust, especially if it is made prematurely or without a clear reciprocal benefit. A transparent evaluation and thorough documentation are therefore essential.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Additionally, criminal risks can arise \u2014 for example, under <a href=\"https:\/\/www.gesetze-im-internet.de\/stgb\/__129.html\" target=\"_blank\" rel=\"noreferrer noopener\">\u00a7 129 StGB<\/a> (supporting a criminal organization), <a href=\"https:\/\/www.gesetze-im-internet.de\/stgb\/__89c.html\" target=\"_blank\" rel=\"noreferrer noopener\">\u00a7 89c<\/a> (terrorism financing), or <a href=\"https:\/\/www.gesetze-im-internet.de\/awg_2013\/__18.html\" target=\"_blank\" rel=\"noreferrer noopener\">\u00a7 18 AWG<\/a> (Foreign Trade and Payments Act: violation of sanctions law). In all these cases, conditional intent is sufficient, and a defence of necessity is usually rejected. Legal assessment heavily depends on the specifics of each case.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Conclusion<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">A cyberattack is no longer a niche issue \u2014 it is a real threat and a legal challenge, making robust IT compliance the first line of defence. Companies need more than just good firewalls. They need a clear action plan for emergencies \u2014 and a preventive strategy that works not only technically but also legally.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Legal advice is of central importance here. <a href=\"https:\/\/pragal-rechtsanwaelte.de\/en\/\">Criminal defence lawyers with experience in white-collar crime<\/a> are familiar with the mindset and procedures of investigative authorities and can help companies avoid early missteps. Whether evaluating the legal implications of a potential ransom payment, planning a strategic response to regulators, or preparing for potential fine proceedings \u2014 professional guidance helps companies assess risks accurately and safeguard their room for maneuver.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\"><em>This article was created as part of a specialist event organized by the Northern Regional Group of the <em><a href=\"https:\/\/www.compliance-verband.de\/regionalgruppen\/nord\/\" target=\"_blank\" rel=\"noreferrer noopener\">Berufsverband der Compliance Manager<em> e.V.<\/em><\/a><\/em> (Federal Association of Compliance Managers &#8211; BCM), held on March 27, 2025, at the offices of Pragal &amp; Prinzenberg. Under the title \u201cCriminal and Civil Liability Risks in the Prevention and Defence Against Cyber Extortion,\u201d participants discussed current issues around cybercrime, corporate responsibility, and risk management. In addition to Dr. Oliver Pragal, who covered the criminal law perspective, RA Wolfgang Prinzenberg spoke on civil liability, and Dr. Peter Dickstein discussed the role of cyber insurance. The key criminal law insights from the evening are explored in depth in this article.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Key Takeaways A cyberattack is now one of the greatest threats to companies \u2014 and at the same time, a challenge for IT compliance. It affects not only large corporations with complex IT structures but increasingly also medium-sized businesses and specialized service providers. This makes it all the more important that companies are prepared not &#8230; <a title=\"Cyberattack and IT Compliance \u2013 Criminal Risks and Preventive Duties for Companies\" class=\"read-more\" href=\"https:\/\/pragal-rechtsanwaelte.de\/en\/blog\/cyberattack-it-compliance-risks-preventive-duties\/\" aria-label=\"Read more about Cyberattack and IT Compliance \u2013 Criminal Risks and Preventive Duties for Companies\">Read more<\/a><\/p>\n","protected":false},"author":6,"featured_media":4104,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[25],"tags":[],"class_list":["post-4105","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-compliance-en"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Cyberattack &amp; IT Compliance: Criminal Risks &amp; Prevention<\/title>\n<meta name=\"description\" content=\"Cyberattacks as a Liability Risk: What Criminal Law Obligations Companies Face &amp; How IT Compliance Protects Against Fines and Penalties.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/pragal-rechtsanwaelte.de\/en\/blog\/cyberattack-it-compliance-risks-preventive-duties\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Cyberattack &amp; IT Compliance: Criminal Risks &amp; Prevention\" \/>\n<meta property=\"og:description\" content=\"Cyberattacks as a Liability Risk: What Criminal Law Obligations Companies Face &amp; How IT Compliance Protects Against Fines and Penalties.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/pragal-rechtsanwaelte.de\/en\/blog\/cyberattack-it-compliance-risks-preventive-duties\/\" \/>\n<meta property=\"og:site_name\" content=\"Pragal Rechtsanw\u00e4lte\" \/>\n<meta property=\"article:published_time\" content=\"2025-04-03T15:23:12+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-02-26T17:48:47+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/pragal-rechtsanwaelte.de\/wp-content\/uploads\/2025\/05\/it-compliance.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t<meta property=\"og:image:height\" content=\"1280\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Anne\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Anne\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Cyberattack & IT Compliance: Criminal Risks & Prevention","description":"Cyberattacks as a Liability Risk: What Criminal Law Obligations Companies Face & How IT Compliance Protects Against Fines and Penalties.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/pragal-rechtsanwaelte.de\/en\/blog\/cyberattack-it-compliance-risks-preventive-duties\/","og_locale":"en_US","og_type":"article","og_title":"Cyberattack & IT Compliance: Criminal Risks & Prevention","og_description":"Cyberattacks as a Liability Risk: What Criminal Law Obligations Companies Face & How IT Compliance Protects Against Fines and Penalties.","og_url":"https:\/\/pragal-rechtsanwaelte.de\/en\/blog\/cyberattack-it-compliance-risks-preventive-duties\/","og_site_name":"Pragal Rechtsanw\u00e4lte","article_published_time":"2025-04-03T15:23:12+00:00","article_modified_time":"2026-02-26T17:48:47+00:00","og_image":[{"width":1920,"height":1280,"url":"https:\/\/pragal-rechtsanwaelte.de\/wp-content\/uploads\/2025\/05\/it-compliance.jpg","type":"image\/jpeg"}],"author":"Anne","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Anne","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/pragal-rechtsanwaelte.de\/en\/blog\/cyberattack-it-compliance-risks-preventive-duties\/#article","isPartOf":{"@id":"https:\/\/pragal-rechtsanwaelte.de\/en\/blog\/cyberattack-it-compliance-risks-preventive-duties\/"},"author":{"name":"Anne","@id":"https:\/\/pragal-rechtsanwaelte.de\/en\/#\/schema\/person\/cfa5a1adaf867917882f950bdfbdb9d4"},"headline":"Cyberattack and IT Compliance \u2013 Criminal Risks and Preventive Duties for Companies","datePublished":"2025-04-03T15:23:12+00:00","dateModified":"2026-02-26T17:48:47+00:00","mainEntityOfPage":{"@id":"https:\/\/pragal-rechtsanwaelte.de\/en\/blog\/cyberattack-it-compliance-risks-preventive-duties\/"},"wordCount":1132,"publisher":{"@id":"https:\/\/pragal-rechtsanwaelte.de\/en\/#organization"},"image":{"@id":"https:\/\/pragal-rechtsanwaelte.de\/en\/blog\/cyberattack-it-compliance-risks-preventive-duties\/#primaryimage"},"thumbnailUrl":"https:\/\/pragal-rechtsanwaelte.de\/wp-content\/uploads\/2025\/05\/it-compliance.jpg","articleSection":["Compliance"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/pragal-rechtsanwaelte.de\/en\/blog\/cyberattack-it-compliance-risks-preventive-duties\/","url":"https:\/\/pragal-rechtsanwaelte.de\/en\/blog\/cyberattack-it-compliance-risks-preventive-duties\/","name":"Cyberattack & IT Compliance: Criminal Risks & Prevention","isPartOf":{"@id":"https:\/\/pragal-rechtsanwaelte.de\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/pragal-rechtsanwaelte.de\/en\/blog\/cyberattack-it-compliance-risks-preventive-duties\/#primaryimage"},"image":{"@id":"https:\/\/pragal-rechtsanwaelte.de\/en\/blog\/cyberattack-it-compliance-risks-preventive-duties\/#primaryimage"},"thumbnailUrl":"https:\/\/pragal-rechtsanwaelte.de\/wp-content\/uploads\/2025\/05\/it-compliance.jpg","datePublished":"2025-04-03T15:23:12+00:00","dateModified":"2026-02-26T17:48:47+00:00","description":"Cyberattacks as a Liability Risk: What Criminal Law Obligations Companies Face & How IT Compliance Protects Against Fines and Penalties.","breadcrumb":{"@id":"https:\/\/pragal-rechtsanwaelte.de\/en\/blog\/cyberattack-it-compliance-risks-preventive-duties\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/pragal-rechtsanwaelte.de\/en\/blog\/cyberattack-it-compliance-risks-preventive-duties\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/pragal-rechtsanwaelte.de\/en\/blog\/cyberattack-it-compliance-risks-preventive-duties\/#primaryimage","url":"https:\/\/pragal-rechtsanwaelte.de\/wp-content\/uploads\/2025\/05\/it-compliance.jpg","contentUrl":"https:\/\/pragal-rechtsanwaelte.de\/wp-content\/uploads\/2025\/05\/it-compliance.jpg","width":1920,"height":1280,"caption":"Hacker - IT-Compliance"},{"@type":"BreadcrumbList","@id":"https:\/\/pragal-rechtsanwaelte.de\/en\/blog\/cyberattack-it-compliance-risks-preventive-duties\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/pragal-rechtsanwaelte.de\/en\/"},{"@type":"ListItem","position":2,"name":"Cyberattack and IT Compliance \u2013 Criminal Risks and Preventive Duties for Companies"}]},{"@type":"WebSite","@id":"https:\/\/pragal-rechtsanwaelte.de\/en\/#website","url":"https:\/\/pragal-rechtsanwaelte.de\/en\/","name":"Pragal Rechtsanw\u00e4lte","description":"Renommierte Hamburger Kanzlei spezialisiert auf Wirtschaftsstrafrecht &amp; Wirtschaftsrecht","publisher":{"@id":"https:\/\/pragal-rechtsanwaelte.de\/en\/#organization"},"alternateName":"Renommierte Hamburger Kanzlei spezialisiert auf Wirtschaftsstrafrecht & Compliance","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/pragal-rechtsanwaelte.de\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/pragal-rechtsanwaelte.de\/en\/#organization","name":"Pragal Rechtsanw\u00e4lte","url":"https:\/\/pragal-rechtsanwaelte.de\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/pragal-rechtsanwaelte.de\/en\/#\/schema\/logo\/image\/","url":"https:\/\/pragal-rechtsanwaelte.de\/wp-content\/uploads\/2026\/02\/logo-pragal-ra-quad.png","contentUrl":"https:\/\/pragal-rechtsanwaelte.de\/wp-content\/uploads\/2026\/02\/logo-pragal-ra-quad.png","width":696,"height":696,"caption":"Pragal Rechtsanw\u00e4lte"},"image":{"@id":"https:\/\/pragal-rechtsanwaelte.de\/en\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/pragal-rechtsanwaelte.de\/en\/#\/schema\/person\/cfa5a1adaf867917882f950bdfbdb9d4","name":"Anne","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/0d55f08c04ffac58ac1d7106bf876427a5f810dc0f5ef77aac01593db9444098?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/0d55f08c04ffac58ac1d7106bf876427a5f810dc0f5ef77aac01593db9444098?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/0d55f08c04ffac58ac1d7106bf876427a5f810dc0f5ef77aac01593db9444098?s=96&d=mm&r=g","caption":"Anne"}}]}},"_links":{"self":[{"href":"https:\/\/pragal-rechtsanwaelte.de\/en\/wp-json\/wp\/v2\/posts\/4105","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pragal-rechtsanwaelte.de\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pragal-rechtsanwaelte.de\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pragal-rechtsanwaelte.de\/en\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/pragal-rechtsanwaelte.de\/en\/wp-json\/wp\/v2\/comments?post=4105"}],"version-history":[{"count":18,"href":"https:\/\/pragal-rechtsanwaelte.de\/en\/wp-json\/wp\/v2\/posts\/4105\/revisions"}],"predecessor-version":[{"id":6240,"href":"https:\/\/pragal-rechtsanwaelte.de\/en\/wp-json\/wp\/v2\/posts\/4105\/revisions\/6240"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/pragal-rechtsanwaelte.de\/en\/wp-json\/wp\/v2\/media\/4104"}],"wp:attachment":[{"href":"https:\/\/pragal-rechtsanwaelte.de\/en\/wp-json\/wp\/v2\/media?parent=4105"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pragal-rechtsanwaelte.de\/en\/wp-json\/wp\/v2\/categories?post=4105"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pragal-rechtsanwaelte.de\/en\/wp-json\/wp\/v2\/tags?post=4105"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}