Berlin, September 4th, 2026 (The Berlin Spectator) – Berlin’s state government confirmed further details about a cyberattack on the city’s state network, warning that stolen data could be published as soon as today.
A group calling itself Rhysida has claimed responsibility for the breach and says it holds 5.7 terabytes of stolen data. Since last Friday, the group has reportedly been trying to extort the city, putting the data up for auction with a minimum bid of 30 Bitcoin, worth roughly two million Euro.
Officials said the leaked material may include personal data belonging to Berlin state employees as well as residents and businesses, though the full scope is still being determined.
Two Senate Departments, One Task Force
The Senate is working closely with Berlin’s State Criminal Police Office (LKA), the Berlin public prosecutor’s office, the Federal Office for Information Security (BSI), and other federal security agencies. The LKA has set up dedicated response units to handle the investigation, analyze the attack, secure the affected data, and support employees. A joint task force has also been formed between the two Senate departments affected.
The Senate Department for Urban Development, Building and Housing is coordinating the overall response through its crisis unit, has opened a contact point for staff, and has brought in an outside confidential legal advisor for employees dealing with sensitive or legally relevant matters.
Authorities say there is currently no indication that the state network remains compromised, though forensic investigations are continuing, including efforts to determine whether additional data may have been taken. Berlin’s IT emergency task force continues to meet regularly.
Notifications And Reporting
Should individuals be identified through analysis of the leaked data, the relevant Senate departments say they will notify those affected on a risk basis, in line with the EU’s General Data Protection Regulation (GDPR) and Berlin’s state data protection law. Anyone whose data ends up published is being advised to file a police report, either through the Berlin police’s online reporting portal or at a local station. City employees have been told that counseling support is available to them.
Florian Hauer, Berlin’s Chief Digital Officer, struck a defiant tone, saying the city “will not be extorted” and that the safety of Berlin’s employees and residents remains the top priority. He said authorities were working at full speed with state and federal security agencies to secure the network and further strengthen its defenses, describing the attack as a serious crime that harms the whole city, and thanked everyone involved for what he called close and trusting cooperation in recent days.
