Hacker attack on Berlin Senate: 5.26 terabytes of secret data leaked on the dark web

The hacker group Rhysida has published approximately 5.26 terabytes of Berlin Senate data on the dark web after no ransom was paid. Experts warn of devastating consequences for national security.

Berlin Senate hacked: emergency plans, account data and CBRN documents on the dark web

Following a cyberattack on the Berlin Senate, massive quantities of highly sensitive data have been freely accessible on the dark web since Friday at 15:35. The hacker group Rhysida has thus made good on its threat after the Senate refused to pay the demanded ransom of approximately two million euros.

According to BILD research, the published material comprises 5.26 terabytes and a total of 1,439,893 files. A complete overview of the damage is not yet available. Publicly accessible material includes, among other things, confidential emergency plans, account data, telephone numbers and private data of state officials — including birth certificates, residential addresses and absence lists.

Particularly significant: a folder labelled "AG CBRN-Rahmenplanung" is part of the data breach. CBRN stands for chemical, biological, radiological and nuclear hazards. These documents are thus also accessible to terrorists and foreign intelligence services. In addition, building plans, emergency guidelines and other security-relevant documents are said to have been stolen.

CDU security expert Roderich Kiesewetter (62) expressed concern to BILD. While it was correct not to give in to the extortion attempt, said Kiesewetter: "Something like this should never have happened." He emphasised: "It would be serious if our communication channels and crisis plans were laid bare."

Investigative journalist Lars Winkelsdorf, who claims to have examined the stolen data, described the attack on the platform "X" as having a "threat to the state" scale. In comments to BILD, he described the contents: in addition to criminal investigation documents from the LKA, the data also included plans for the defence case as well as secret communication channels of the Federal Government for extreme crisis scenarios.

When asked what consequences could be expected in the coming weeks, Winkelsdorf responded: "Devastating terrorist attacks." The recent attacks on transformer substations were "a joke" in comparison. He formulated the core problem as follows: "Now every crackpot has an instruction manual on how to completely cripple the country's entire infrastructure within two days." His conclusion: the consequences of the attack are "worse than betrayal from within the Chancellor's immediate circle" — and: "If war comes, we could already have lost now."

Millions of Berlin citizens are meanwhile wondering whether their personal data has been affected. Clear answers from Berlin's administration and politics have been lacking so far. The Berlin Senate spokesperson was unavailable for comment to BILD on the evening of the incident.

Source: BILD

Read this article in the original language