Hackers Target Berlin in Major Cyber Attack

Berlin is currently facing a serious cybersecurity incident, with hackers successfully breaching city systems and stealing sensitive data. The mayor, Kai Wegner, has confirmed that officials will not give in to ransom demands made by the attackers earlier this month.

The Attack and Its Aftermath

Wegner revealed that the cybercriminals issued a ransom demand on Thursday evening, seeking an undisclosed amount. However, reports suggest they are asking for 30 bitcoin, equating to approximately €2 million (£1.7 million). As a result of the attack, some online services in the German capital were temporarily shut down, complicating the efforts of investigators who are working to identify the extent of the data breach.

Who Are the Attackers?

The Rhysida group, believed to operate from Russia and Eastern Europe, has claimed responsibility for this incident. This group previously targeted the British Museum, further highlighting their capability and ambition. They announced on their website that they plan to auction the 5.79 terabytes of data stolen from Berlin within a week’s time.

Official Response

“Berlin will not be blackmailed,” Wegner asserted on Friday. In response to the attack, state police, prosecutors, and federal security agencies are prioritizing the investigation of the suspected hackers. The mayor stressed that inquiries into the nature and volume of compromised data are being conducted with utmost urgency.

Details of the Data Breach

According to officials, an initial data leak appears to have occurred between August 7 and August 12. Then, on August 14, two department networks were disabled, hindering applications for housing benefits and payments for several days. Forensic investigations have since unveiled further data leaks within the city’s transport and environment department.

The mayor’s office acknowledged the possibility that personal and other confidential information may have been compromised. Although authorities in Berlin have not formally identified the cyber attackers, screenshots shared by media outlets reveal that the Rhysida group claims to possess various files, including contracts, non-disclosure agreements, and thousands of personal contact details. They are displaying a countdown on their dark web site, indicating when they will start auctioning the information for the same 30 bitcoin they are demanding from the city.

Background on the Rhysida Group

Since emerging in 2023, the Rhysida group has claimed responsibility for hundreds of cyber attacks targeting government entities and businesses across numerous countries. They successfully infiltrated the British Museum’s systems, stealing about 500,000 files. When the museum refused to pay the ransom, the group released the stolen data on the dark web, exposing personal information of visitors and staff.

The recent cyber-attack on Berlin comes just a month before the city is scheduled to hold elections. However, state senator Iris Spranger has assured the public that election infrastructure has not been compromised in the breach.

Conclusion

As Berlin navigates this critical situation, the resolve to resist extortion remains strong. The ongoing investigation aims to mitigate the effects of this breach and protect the personal data of its residents.

• Hackers compromised Berlin’s city systems, demanding a ransom of 30 bitcoin.
• The Rhysida group, linked to past attacks, claims responsibility for the breach.
• Officials are investigating the extent of the data leak, which may include personal information.
• The attack occurred just before upcoming elections, though election systems remain secure.