Berlin is currently navigating the aftermath of a significant cyberattack that has resulted in a ransom demand against the city government. Mayor
The incident, which occurred on August 14, initially disrupted several municipal departments, with the housing and environmental sectors experiencing the most severe connectivity issues. These technical failures prevented the processing of housing benefits and related payments for a period of one week. While local authorities initially suggested that sensitive information remained secure, they acknowledged on Wednesday that personal data may have been compromised during the intrusion.
Ransom Demands and Security Investigations
According to reports from the German weekly publication Der Spiegel, the perpetrators have demanded a payment of 30 bitcoins, a sum currently valued at approximately two million euros, or $2.5 million. The publication, citing security sources, identified the hacker collective known as Rhysida as the group behind the extortion attempt. The group has reportedly threatened to release the stolen data publicly if the ransom is not paid within a one-week timeframe.
Mayor Wegner addressed the situation firmly, stating that the city would not yield to the demands of the attackers. He characterized the event as a serious crime and noted that German security services are currently engaged in an intensive effort to identify and apprehend those responsible. Officials are also conducting a comprehensive audit to determine the full extent of the data breach and which specific files were accessed by the hackers.
Context of the Breach and Electoral Security
The Rhysida collective has previously been linked to high-profile ransomware incidents, including a 2023 attack on the British Library. In that instance, the institution refused to meet the group's demand for 20 bitcoins, leading the hackers to publish approximately 500,000 files containing the personal information of staff, visitors, and subscribers on the dark web.
Despite the ongoing security crisis in the capital, local officials have moved to reassure the public regarding the integrity of upcoming democratic processes. Iris Spranger, one of Berlin’s deputy mayors, confirmed that the cyberattack has not compromised the city-state's electoral infrastructure. She stated that the vote scheduled for September 20 remains fully secure, asserting that the integrity of the ballot is not at risk due to the recent network breach.