Berlin, September 5, 2026 – Berlin is reeling from what authorities are calling a “data catastrophe” after a massive trove of confidential documents from the Berlin Senate Administration fell into the hands of hackers and was subsequently published on the Darknet. The unprecedented cyberattack has exposed an estimated 1.4 million files, totaling 5.26 terabytes of highly sensitive information, raising severe concerns for the security of the German capital.
Unprecedented Scale of the Breach
The cyberattack, which occurred between August 7 and 12, saw attackers exfiltrate a colossal amount of data from Berlin’s administrative systems. The hackers, identified as the group “Rhysida,” initially demanded a ransom of 30 Bitcoin (approximately two million euros). However, the Berlin Senate refused to pay, leading to the hackers making their entire haul public on the Darknet on Friday afternoon.
Experts are warning that the sheer volume and sensitivity of the leaked data could have devastating consequences for Berlin’s security. The exposed information reportedly includes data related to drinking water supply, emergency and crisis plans, and a vast array of personal details.
What Has Been Exposed?
The leaked data encompasses a wide range of internal documents from various departments of the Senate Administration, records of political decision-making processes, and confidential administrative files. The breach also includes:
- Personal Information: Phone numbers, salary data, home addresses, birth certificates, scanned IDs, absence lists, and other sensitive personal documents, particularly of state officials.
- Confidential Personnel Matters: Files related to disciplinary proceedings, marked explicitly as “Confidential Personnel Matter!”, as well as rehabilitation documents, sick leave certificates, and medical attestations.
- Critical Infrastructure Data: Information concerning the city’s drinking water supply and emergency preparedness plans.
- Government Projects: Over 550 files related to the construction of the Chancellery extension, including expert opinions, plans, and statements from the State Criminal Police Office.
- Building Plans: Various construction plans and highly sensitive architectural documents.
Once data is released onto the Darknet, it is virtually impossible to fully retract, as copies can be stored globally and re-uploaded indefinitely, posing a long-term threat.
Official Response and Warnings
As of Saturday morning, the official capital portal has provided limited information on the data scandal. It states that IT forensic experts are working intensively to examine the published data. Concurrently, authorities are preparing to notify potential victims. Individuals identified as affected will be informed directly.
There is currently no dedicated hotline for concerned citizens. The Senate Chancellery has issued a stern warning about the risk of identity theft. Anyone who discovers their personal information online or suspects it is being used for criminal activities like fraud is urged to report it to the police immediately.
Despite the gravity of the situation, Berlin’s Governing Mayor Kai Wegner (CDU) had not made a public statement regarding the data leak by Saturday morning. He was seen attending a women’s basketball game on Friday evening with Interior Senator Iris Spranger (SPD) and Federal Chancellor Friedrich Merz (CDU).
The Threat of “Rhysida”
The criminal hacking group “Rhysida,” named after a venomous centipede, presented its stolen data on the Darknet with a message stating, “All data has been made public. Have fun with it, data hunters.” The group’s modus operandi typically involves ransomware attacks followed by data exfiltration and publication if demands are not met.
This incident marks a significant escalation in cyber threats against public institutions, highlighting vulnerabilities in government IT infrastructure and the critical need for robust cybersecurity measures to protect sensitive data and public safety.
