Hacker group Rhysida extorted Berlin with 30 Bitcoin – data breach after payment refusal
The ransomware group Rhysida published terabytes of Berlin municipal authority data after the state refused the ransom demand. According to the Süddeutsche Zeitung, the group was formerly known as Vice Society.
Berlin refused payment – Rhysida posted municipal authority data online
The ransomware group Rhysida demanded 30 Bitcoin from the state of Berlin, equivalent to approximately two million euros. When Berlin did not pay, the criminals published terabytes of stolen data on the internet. According to the Süddeutsche Zeitung, the data includes protocols for protecting critical infrastructure, information on 80,000 administrative violations, and confidential documents from Bundesrat committees.
According to experts, the group previously operated under the name Vice Society and carried out attacks itself. With the rebranding to Rhysida – symbolised by a centipede in the logo – the business model changed fundamentally: the group has since rented its malware to other criminal gangs. This principle is referred to in the industry as ransomware-as-a-service.
Berlin's decision not to pay is regarded by specialists as correct. Experts believe that the hackers would have sold on the data even after a ransom payment was made.
Fundamental protection against ransomware is only possible through solid cybersecurity – precisely where many public administrations fall short, often lacking the financial resources to do so.
Source: Süddeutsche Zeitung