Berlin Cyberattack Leads to 1.4 Million Files Exposed on Dark Web

Post Views: 9

More Than 1.4 Million Files From Berlin Administration Published On Dark Web After Cyberattack

A breach targeting the Berlin administration resulted in the exposure of over 1.4 million files on the dark web following a cyberattack on August 14. The compromised data includes sensitive personal, financial, and governmental information, with attackers demanding a ransom of approximately two million euros and 30 Bitcoin. The stolen material reportedly encompasses payroll records, bank details, identity document scans, and employee-related data, including addresses, telephone numbers, and birth certificates. The volume of leaked files totals 1,439,893, with a folder titled “AG CBRN-Rahmenplanung” containing details on chemical, biological, radiological, and nuclear threat scenarios. The breach also involved documents linked to investigations by the State Criminal Police Office (LKA) and national defense planning. Authorities are currently assessing the scope of the leak, while the ransomware group responsible, identified as Rhysida, published the data after the ransom deadline expired. The attack disrupted two city departments, leading to network outages for housing and environmental administrations, with some services and payment systems temporarily halted. Berlin Mayor Kai Wegner declined to pay the ransom, stating that such payments would not ensure the deletion of stolen information. The hackers had previously threatened to release the data on their leak site, and members of the group have since shared filename lists on social media platforms. A dedicated crisis unit is analyzing the published information to identify individuals whose data may have been compromised. The incident highlights vulnerabilities in governmental cybersecurity infrastructure, prompting calls for enhanced protective measures and incident response protocols. The breach underscores the growing threat of ransomware attacks on public sector entities, with the exposure of classified and sensitive data posing significant risks to both individuals and national security. Ongoing investigations aim to determine the full extent of the compromise and potential mitigation strategies to prevent future incidents.