Berlin Cyberattack Exposes 1.4 Million Files on Dark Web
A serious cyberattack in Berlin has resulted in the exposure of approximately 1.4 million files on the dark web, a situation that has raised alarms about the security of Germany's data networks. The hacker group Rhysida, which has been linked to numerous attacks on public institutions globally, stole sensitive data including employee files, official correspondence, pay stubs, and scanned ID documents. They attempted to extort the Berlin city government for a ransom of 30 bitcoins, equivalent to around €2 million, threatening to publish the data if their demands were not met.
Berlin's Governing Mayor, Kai Wegner, firmly stated that the city would not succumb to blackmail. Following this declaration, the stolen data was indeed published on the dark web, a part of the internet known for illegal activities and accessible only to those with specific technical skills. The breach has compromised two key departments of the city government, namely the Department of Public Works and the Department of Transportation, which serve a population of approximately four million residents.
The hackers gained access to the sensitive data between August 7 and 14, 2023, without detection. The breach occurred when an employee of the Berlin Transportation Authority fell victim to a phishing email, inadvertently granting the attackers access to the network. Rhysida, believed to be based in Eastern Europe, has claimed responsibility for nearly 280 attacks since 2023, primarily targeting institutions in the United States.
Concerns Over Data Breach Consequences
Experts have expressed concern over the potential consequences of this data breach. Jochim Selzer from the Chaos Computer Club noted that the publication of such personal information could enable identity theft and impersonation, raising serious privacy and security issues for those affected. The data breach not only includes personal details but also sensitive information related to critical infrastructure, such as power plants and emergency services.
Approved for Dissemination
In response to the breach, the Berlin state government has advised employees to change their passwords, a move that has drawn criticism from local police union representatives who argue that this response is insufficient given the severity of the incident. The Berlin Senate has since established a coordination office to manage the situation and is working with federal agencies, including the Federal Office for Information Security (BSI).
Despite the breach, officials have reassured the public that the upcoming state parliamentary election scheduled for September 20 will proceed as planned, with all necessary systems remaining unaffected. Chancellor Friedrich Merz has also been indirectly impacted by the data theft, as the stolen information includes details regarding the contentious expansion of the Chancellery in Berlin.
