Overview
- Forensic work uncovered an IKT‑incident and both the Senatsverwaltung für Stadtentwicklung and the Senatsverwaltung für Mobilität were isolated from the Landesnetz as a security measure, a step officials say was taken on Friday.
- A Notfallkrisenstab was formed and the Landeskriminalamt, the Staatsanwaltschaft Berlin and the BSI have opened a criminal probe to coordinate containment and technical forensics.
- Staff in the two administrations report they are largely unable to work without internet or external email access, and internal phone and limited mail remain the only reliable channels.
- Several outlets, including RBB and the Tagesspiegel, report that data may have been exfiltrated and that attackers exploited a weakness in the Stadtentwicklungsverwaltung’s IT, but the Senatskanzlei has not confirmed loss of sensitive data.
- The incident exposes long‑standing governance and patching gaps in Berlin’s Landesnetz and risks delayed citizen services such as Wohngeld and BuT payments, prompting calls for hearings and sustained cybersecurity investment.