Overview
- Unidentified attackers gained access to a Charité server and copied a file containing personal contact details such as names and organisational affiliations for staff, students and external contacts.
- Charité says sensitive patient health records were not accessed and that clinical operations and patient care were never disrupted.
- The hospital detected and contained the intrusion, has hired an external IT security firm, filed a criminal complaint and plans to notify affected individuals individually very soon.
- Key details remain unresolved, including how many people were affected, the full contents of the stolen file and whether the data have been published or misused, and those questions are the focus of ongoing investigations.
- The incident follows a pattern of attacks on German universities and research institutions and may prompt stricter security checks and regulatory scrutiny under data‑protection rules.