Berlin Cyberattack: Rhysida Group Leaks Massive State Data After Ransom Refusal

The hacker collective Rhysida has released nearly six terabytes of data belonging to Berlin’s state administration on the dark web, marking a significant breach of government information. The dump comprises 1,439,893 files, yet political leaders and administration officials have offered little public response thus far.

Among the exposed materials is a directory labeled “AG CBRN-Rahmenplanung,” which contains details regarding chemical, biological, radiological, and nuclear threat scenarios. This revelation raises serious concerns that critical defense strategies could fall into the hands of terrorists or foreign intelligence agencies.

Investigative journalist Lars Winkelsdorf urged immediate attention to the incident on X, describing the attack as a threat to the state’s very existence. He noted that the leaked archive includes Lower Saxony Criminal Police (LKA) investigation documents, national defense blueprints, secret federal communication protocols for catastrophic events, and emergency plans devised by government bodies.

The breach also compromises extensive personal data, particularly involving state employees. Exposed records appear to include birth certificates, absence logs, home addresses, and telephone numbers.

The release followed an ultimatum from the hackers, who demanded a ransom of 30 Bitcoin—approximately €2 million—and threatened to publish the stolen files if their deadline was not met. The Berlin Senate had previously stated it would not capitulate to blackmail. With the countdown expiring around 3:35 pm on Friday, the group proceeded to leak the data shortly thereafter.