Hacker attack on Berlin: 5.26 terabytes of senate data published on darknet

The hacker group "Rhysida" has published approximately 1.4 million files totalling 5.26 terabytes on the darknet following a ransomware attack on Berlin's senate administration. The breach affects private individuals, authorities and sensitive security documents.

Berlin Senate Administration: Millions of documents published on darknet after hacker attack

The criminal hacker group "Rhysida" has published approximately 5.26 terabytes of data containing more than 1.4 million files on the darknet following a massive attack on Berlin's senate administration. This is reported by BILD. Private individuals, companies and security authorities have all been affected.

Between 7 and 12 August, the attackers extracted vast quantities of data from Berlin's administration. They subsequently demanded 30 Bitcoin, equivalent to around two million euros. The Berlin Senate refused to pay. After the ultimatum expired, "Rhysida" made the entire stolen data publicly accessible on the darknet on Friday afternoon. The group is named after a poisonous centipede.

Certificates, ID cards, salary data

The leak includes internal documents from various departments of the senate administration, documents relating to political decision-making processes and confidential administrative records. According to the Frankfurter Allgemeine Zeitung, these also include certificates, scanned ID cards and other sensitive personnel documents. Telephone numbers, salary data and residential addresses of state officials are also said to have been published.

Particularly serious: even files relating to disciplinary proceedings ended up online – some marked with the explicit designation "Confidential personnel matter!". Rehabilitation records, certificates of incapacity for work and medical certificates are also accessible, according to Tagesspiegel. In addition, birth certificates and absence lists of officials have been disclosed.

Chancellor's office plans and emergency guidelines leaked

Der Spiegel reports that more than 550 files relating to the construction of the chancellor's office extension were obtained, including expert reports, plans and statements from the state criminal police office. Data on drinking water supply, emergency and crisis plans as well as construction plans are also part of the published data. In the leaked files, documents on wastewater disposal for crisis and disaster situations also appear under the keyword "defence".

Experts warn that the data breach could be devastating for the capital's security. Once a dataset has ended up on the darknet, it is considered permanently published: copies can be stored worldwide and uploaded again at any time.

Senate responds – mayor remains silent

So far, only limited information about the incident has been available on the senate administration's capital portal. IT forensics experts are examining the published data with high urgency, it is stated there. In parallel, the authorities are preparing to notify identifiable victims. A hotline for concerned citizens does not yet exist. The senate chancellery explicitly warns against identity theft: anyone who discovers their own personal data or notices signs of fraudulent use should file a criminal complaint immediately.

The Berlin Senate did not respond to a BILD inquiry by press deadline. Berlin's Governing Mayor Kai Wegner (53, CDU) has not made any public statement since the leak became known by Saturday morning. He was at a women's basketball World Cup match against Spain on Friday evening at the Uber Arena in Berlin alongside Interior Senator Iris Spranger (64, SPD) and Federal Chancellor Friedrich Merz (70, CDU).

Source: BILD

Read this article in the original language