Berlin Rejects Ransom Demand After City Network Breach
Berlin's government confirms a ransomware attack targeting its administrative systems. Officials refuse to pay hackers despite ongoing data theft.
TL;DR
- Berlin confirms cyberattack on its state network with active extortion attempts.
- Sensitive data was stolen from multiple departments including mobility and environment.
- City officials publicly refuse to pay any ransom to the attackers.
- Forensic investigations reveal additional unauthorized data transfers.
- Attack highlights risks of ransomware targeting public sector infrastructure.
Berlin's state government has confirmed it is responding to a significant cybersecurity incident that began in August, when threat actors gained access to the city's administrative network. The breach has led to an attempted extortion, which officials have publicly refused to honor.
According to initial findings from forensic teams, the attackers were able to exfiltrate data from several departments, including the Senate Department for Mobility, Transport, Climate Protection and Environment. This disclosure suggests a broader compromise than initially reported.
Attack Overview
- Initial compromise occurred in August 2026 on Berlin's state administrative network
- Attackers successfully accessed and extracted sensitive government data
- Extortion attempt made following data theft from multiple city departments
- Berlin officials confirmed they will not negotiate or pay any ransom demands
Investigation Findings
- Forensic analysis revealed additional data outflows beyond the initial discovery
- Senate Department for Mobility, Transport, Climate Protection and Environment was affected
- Ongoing investigation continues to assess full scope of the breach
- No information released yet about attack vectors or initial entry points used by threat actors
Sources
Sources
Security email updates
One digest email when we publish new security articles (TL;DR plus links to read more). Unsubscribe anytime from the message footer. See our Privacy Policy.