Berlin Government Grapples with Cyberattack Aftermath, Full Recovery Still Days Away
Berlin, August 19, 2026 – Five days after a significant cyberattack targeted Berlin’s state network, the full restoration of functionality for affected government departments remains several days away. Governing Mayor Kai Wegner (CDU) confirmed the ongoing severity of the situation, stating, “The attack on our state network was serious, and it is still serious.”
The cyberattack, discovered last Friday, led to the immediate isolation of two key departments from the state network: the Senate Department for Urban Development, Building and Housing, and the Senate Department for Mobility, Transport, Environment, and Climate Protection. This measure was taken as a precaution to prevent further damage and contain the threat.
No Sensitive Data Compromised, Investigations Ongoing
Despite the severity of the incident, initial investigations have found no evidence of sensitive data exfiltration. “According to initial findings, no sensitive data has been leaked,” Wegner emphasized. Security experts are currently investigating whether the attack may have commenced several days prior to its detection.
Berlin’s Chief Digital Officer, Florian Hauer, described the incident as a “very serious attack,” indicating that “no amateurs were at work here.” However, he highlighted that the attack was detected quickly, allowing for early implementation of countermeasures. The precautionary disconnection of the two Senate administrations was crucial in preventing a more widespread impact.
Impact on Public Services and Election Security
The cyberattack has had tangible consequences for public services. The affected Senate administrations are currently cut off from the internet, preventing external email communication and rendering home office work impossible. While the administrations are still operational, critical services such as the disbursement of housing benefits to over 50,000 eligible households in Berlin have been temporarily halted. Mayor Wegner assured that efforts are underway to secure these payments, with calls from political parties for alternative solutions if necessary.
Regarding the upcoming Berlin House of Representatives election on September 20, Interior Senator Iris Spranger (SPD) confirmed that the election is not at risk. “According to the current status, the IT systems required for the elections are not affected,” Spranger stated, referring to both election preparation and evaluation systems. A temporary disruption in online absentee ballot applications has been resolved, and it remains unclear if this issue was directly linked to the cyberattack.
Geodata Leaked, But Publicly Available
Olaf Kroll-Peters, the State Commissioner for Information Security, confirmed that geodata was leaked during the attack. However, he noted that this data is already freely available online, mitigating concerns about its compromise.
Details regarding the nature of the hacker attack have been withheld by the Senate due to security reasons, aiming to avoid hindering ongoing investigations and revealing potential vulnerabilities. “Right now, it’s about containing and isolating the danger,” Hauer explained, emphasizing the focus on acute crisis management over immediate cause analysis.
Strengthening Cybersecurity Measures
The incident has reignited discussions about the importance of centralized IT control and cybersecurity. CDU top candidate Stefan Evers advocated for a central digital budget and a Chief Digital Officer with comprehensive authority over departments, stressing that “the threat situation in Berlin is generally high as the federal capital. Therefore, cybersecurity must be the highest priority.”
Since 2022, the “Security Operations Center” (SOC) has been in place to enhance the detection and defense against hacker attacks on the state network. However, this center currently only covers a portion of Berlin’s administrative network. The city is collaborating closely with federal security agencies and a major US security firm to manage the aftermath of the cyberattack.
The investigation into the attack continues, with authorities working diligently to restore full functionality to the affected departments while ensuring the security and integrity of Berlin’s digital infrastructure.
Source: https://www.zeit.de/news/2026-08/19/wegner-probleme-nach-hackerangriff-in-berlin-dauern-an
