Overview
- The hacker group Rhysida published the stolen dataset to the Darknet on Friday, releasing about 1.44 million files that reporters and experts say total roughly 5.7–5.8 terabytes.
- Investigators say intruders had undetected access to parts of Berlin’s Landesnetz in early August and the breach was discovered on August 14, with a ransom demand of 30 Bitcoin that the Senat refused to pay.
- Berlin has set up a dedicated steering unit led by the Staatssekretär for digitalization and is working with the BSI, BKA and BfV to screen the data, notify affected people and advise organisations.
- Journalists and independent analysts report the dump contains large amounts of personal material such as passports and personnel files plus documents that could touch on critical infrastructure and security, raising risks of identity fraud and targeted phishing.
- Security experts and opposition politicians accuse the administration of serious failures in secrecy and IT protection, Rhysida is a known financially motivated actor since 2021, and authorities warn the full scope and second‑order effects will take time to determine.