Berlin authorities have intensified their response after a ransomware group published a large volume of data allegedly stolen during a cyberattack on the city-state’s government network. Officials are now examining the released files to determine what information was compromised and what risks the breach could create for residents, employees and businesses.
Central Crisis Unit Leads Data Investigation
Berlin has established a central coordination unit within the Senate Chancellery to oversee the examination of the leaked information. The team, led by Chief Digital Officer Florian Hauer, includes cybersecurity officials, investigators, data protection authorities and other security agencies.
The unit is responsible for reviewing, verifying and assessing the published files while helping the two affected government departments determine whether individuals or organizations have been exposed.
Authorities said the investigation is being conducted according to risk, with priority given to information that could pose immediate security concerns.
Ransomware Group Published Gigabytes of Data
The cyberattack targeted parts of Berlin’s state network, with the Senate administrations responsible for mobility and urban development among the affected departments. The group known as Rhysida claimed to have obtained roughly 5.7 to 5.8 terabytes of information.
The attackers had previously attempted to pressure Berlin into paying a ransom, offering the stolen information through an auction with a starting demand of 30 bitcoin. Berlin had rejected the extortion attempt before the data was subsequently published.
The released material could include information belonging to government employees, Berlin residents and companies. Authorities are continuing forensic investigations to determine the full extent of the breach and whether additional information was accessed.
Authorities Warn Against Unverified Reports
Berlin officials have described the incident as a serious criminal attack against the state and urged residents to avoid spreading unverified claims about the leaked information on social media.
People identified as being affected will be contacted by the relevant authorities in accordance with German and European data-protection requirements. Anyone who discovers that their personal information has been published or potentially used for fraud or identity theft has been advised to report the matter to police.
The investigation comes shortly before Berlin’s September 20 state elections, adding further sensitivity to the cybersecurity incident. Authorities continue to work with state and federal security agencies while forensic specialists examine the compromised systems and released data.
