Staff Report
The digital integrity of Berlin’s state administration has been profoundly compromised, with nearly six terabytes of highly sensitive data now circulating on the dark web. This massive leak, attributed to the hacker group “Rhysida,” emerged after the city’s refusal to meet a ransom demand of 30 Bitcoin, equivalent to approximately two million euros. The hackers had set a clear ultimatum, a countdown timer that expired around 3:35 PM on Friday, before making good on their threat to publish the trove of information.
Among the 1,439,893 files now publicly accessible is a folder explicitly labeled “AG CBRN-Rahmenplanung,” signaling the exposure of information related to chemical, biological, radiological, and nuclear threats. The implications of such a breach are far-reaching, raising immediate concerns that this data could be exploited by terrorist organizations or foreign intelligence services. Lars Winkelsdorf, an investigative journalist, underscored the gravity of the situation on “X,” describing the cyberattack as being “of a magnitude that threatens the state.”
Winkelsdorf’s analysis further detailed the contents, revealing not only documents from the LKA (State Criminal Police Office) pertaining to ongoing investigations but also strategic national defense plans. These sensitive materials reportedly include secret communication protocols for the federal government in the event of an apocalyptic scenario, details about defense-related companies, and emergency blueprints developed by various government agencies. The sheer breadth of this exposed information paints a stark picture of the vulnerabilities inherent in modern digital infrastructure.
Beyond national security concerns, a significant volume of personal data belonging to state civil servants has also been released. This includes highly private details such as birth certificates, what appear to be absence records, personal telephone numbers, and home addresses. The widespread dissemination of such intimate information could have severe repercussions for the individuals affected, potentially exposing them to identity theft, harassment, or other forms of exploitation. The silence from Berlin’s administration and political leadership following the leak has been notable, drawing criticism given the immense scale of the breach.
The decision by the Berlin Senate to stand firm against the hackers’ demands, a principled stance against blackmail, ultimately led to the data’s publication. Shortly after the countdown concluded, the data package appeared on the dark web, with members of the Rhysida group actively sharing lists of filenames on social media platforms as evidence of their successful breach. This incident serves as a potent reminder of the constant, evolving threat cyberattacks pose to governmental institutions and the delicate balance between security and resilience in the face of digital extortion.
