Berlin Confirms Ransomware Group Behind State Network Hack
The State Chancellery warns of a possible data leak which could appear today.
Berlin’s state government has revealed more information regarding a recent cyberattack on the city’s state network. The attackers, identified as Rhysida, claim responsibility for the breach and assert they have stolen 5.7 terabytes of data. The group has been attempting to extort the city by auctioning off the data, with a minimum bid of 30 Bitcoin, valued at approximately two million Euros.
The stolen information may include personal details of Berlin state employees, residents, and businesses, although the full extent of the data remains unclear. The Senate has collaborated with the State Criminal Police Office (LKA), the Berlin public prosecutor’s office, the Federal Office for Information Security (BSI), and other federal security agencies to address the situation.
Two Senate departments have established a joint task force to manage the investigation, assess the breach, secure the compromised data, and assist affected individuals.
The Senate Department for Urban Development, Building, and Housing is overseeing the overall response, operating through its crisis unit and providing a contact point for employees with sensitive or legally relevant matters. They have also engaged an outside legal advisor to assist employees dealing with potentially compromised information.
As of now, there is no evidence suggesting the state network remains compromised, but forensic investigations are ongoing to determine if additional data may have been accessed. The IT emergency task force continues to meet regularly to coordinate efforts.
Individuals identified through the analysis of the leaked data can expect to be notified by the affected Senate departments, adhering to the EU's General Data Protection Regulation (GDPR) and Berlin's state data protection law. Those whose data becomes public are advised to file a police report through the Berlin police's online portal or at a local station.
City employees have been informed that counseling support is available to them. Berlin's Chief Digital Officer, Florian Hauer, emphasized the city's resolve, stating that "the State of Berlin will not be blackmailed" and that employee and resident safety remains the top priority. Authorities are working swiftly with state and federal security agencies to secure the network and bolster defenses, describing the incident as a serious crime that impacts the entire city, and expressing gratitude for the close cooperation of all involved parties.
Written by urgent.news from The Berlin Spectator's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
