Hackers publish 1.4 million files from Berlin state network on darknet
Following a cyberattack on Berlin Senate administrations, 1.4 million files were published on the darknet. Politicians and trade unions have levelled sharp criticism at the Senate's crisis management.
Berlin data breach: Senate under fire after publication of sensitive government data
After 1,439,893 files from the IT network of the state of Berlin were published on the darknet, the Senate has called on affected citizens to file criminal complaints. According to Google News LU DE, citing the Tagesspiegel, the hacker group's ultimatum expired on Friday afternoon at 15:35; shortly afterwards, they made 5.26 terabytes of data available for free download.
Anyone with concrete evidence that their data has been published or used for crimes such as fraud or identity theft should file a criminal complaint — "either via the Berlin police cybercrime unit or at any local police station", the Senate chancellery said on Friday evening. Those affected could also contact the Berlin state data protection officer, with whom the Senate said it was in close contact.
Hackers had undetected access for days
According to the hacker group's own claims, it had undetected access to the networks of the Senate administrations for building and transport from 7 to 12 August. They claim to have stolen 5.7 terabytes of data — including numerous items of personal information. Since the previous Friday, the group had been offering the data on the darknet for auction. After no ransom was paid, they published the files without restriction.
According to investigations by the Tagesspiegel, the accessible data includes material relevant to the security of the Federal Republic and the capital. An overview also shows extensive personnel data, including private telephone numbers of employees.
"The security authorities are currently conducting an intensive data review," the Senate chancellery said. IT forensics experts commissioned by the state were investigating the published data at high speed. If individual affected parties could be identified in the course of the analysis, they would be informed "on a risk-based basis and in accordance with legal requirements" by the responsible Senate administrations.
Left and Greens call for swift action
The Left party faction described the incident on Friday evening as an "IT catastrophe". Faction chief Tobias Schulze explained that the extortionists had not received the desired price and then published the data. "This is the most unfortunate situation imaginable, because now anyone with a bit of technical knowledge can access this data," said Schulze. He called on the Senate to notify all those affected immediately and to offer the best possible help. For the future, there was a need for uniform security standards and a binding roadmap for implementing the acceptance requirement with the state's central IT service provider.
Green faction chief Werner Graf criticised that the Senate had been "asleep at the wheel" on IT security — and must not repeat this mistake in victim protection. "Passwords, account data and personal information from tens of thousands of Berliners and state employees could be used for identity theft and targeted phishing attacks," said Graf. He demanded a joint information campaign by the Senate, the data protection authority, the consumer protection centre and security authorities, as well as a simple procedure allowing those affected to check whether their data has been compromised.
Trade union: "Asleep for decades"
Scathing criticism came from Thorsten Schleheider, state vice-chair of the Police Trade Union. "This cyberattack fits seamlessly into the series of such incidents affecting our authorities. It has made Berlin's politicians acutely aware once again that there has been negligence here for years," said Schleheider. Whilst it was right not to give in to extortion, he said, "but it cannot be that highly sensitive data was stolen for days and the only response apparently is to instruct employees to change their passwords. That shows a certain degree of helplessness," he said. From a new state government, he expected a comprehensive substantive concept rather than "phrases about digitalisation". "The system has serious gaps; we are vulnerable at many levels."
Manuel Barth, chair of the German Fire Brigade Union Berlin-Brandenburg, was equally appalled. "We are experiencing precisely now what happens when what is necessary is not fully done and financed," he said. With regard to fire service data in the stolen files, Barth said his union considered this to be "highly problematic". Anyone wanting high security standards but providing only inadequate resources for technology and staff was hoping "for miracles".
State secretary informs employees
Florian Hauer, the state secretary responsible for IT security, informed state employees in writing on Friday afternoon about the current situation. The letter is available to the Tagesspiegel. In his letter, with a view to the data publication that was still pending at that time, Hauer wrote that it was not yet fully foreseeable what this would mean for the public debate and for employees in the Berlin state service.
Source: Google News LU DE