Berlin Mayor Rejects Hacker Ransom Demand

Berlin’s mayor insists the city will not yield to ransom demands from hackers who compromised city data systems, demanding 30 bitcoin.

Berlin is facing a serious cybersecurity threat as hackers have compromised city systems and stolen sensitive data, the mayor revealed. Mayor Kai Wegner stated that officials would not concede to the ransom demands, which emerged on Thursday evening. Although the exact amount sought was not disclosed, reports indicate that the hackers are demanding 30 bitcoin, equivalent to approximately €2 million (£1.7 million).

The cyber-attack had significant repercussions, forcing the shutdown of some online systems within the German capital. Investigators are currently analyzing what specific data has been breached.

The group reportedly responsible for the attack is known as Rhysida, believed to operate from Russia and Eastern Europe. This group has a history of cyber intrusions, including a previous attack on the British Museum, and has indicated on its website that it plans to auction off 5.79 terabytes of the stolen data in seven days, as reported by the news agency Reuters.

“Berlin will not be blackmailed,” Wegner emphasized on Friday, reinforcing the city’s stance against the extortion attempt.

In response to the attack, a coordinated investigation is underway involving state police, prosecutors, and federal security services, all prioritizing the identification of the perpetrators. Wegner mentioned that intensive inquiries are ongoing into the extent of the data compromised in the breach.

City officials disclosed that an initial data leak was detected between August 7 and August 12. Following this, on August 14, two departmental networks were shut down, disrupting applications for housing benefits and making payments unavailable for several days.

Forensic analyses later uncovered additional data leaks, particularly affecting Berlin’s transport and environment sectors. The mayor’s office stated, “It cannot be ruled out that personal or other non-public data may also be affected.”

Although authorities have not officially named the suspected attackers, a screenshot from Rhysida’s dark web site claims to possess sensitive files, which includes contracts, non-disclosure agreements, personnel files, passwords, and thousands of personal contact details. The group is reportedly showcasing a countdown until they will begin auctioning off the data with a starting bid set at 30 bitcoin, aligning with the ransom amount they are seeking from the city.

Since its inception in 2023, the Rhysida group has claimed responsibility for hundreds of attacks, targeting both government institutions and businesses across various countries. In its most notable breach, the group successfully infiltrated the British Museum’s computer systems, leading to the theft of around 500,000 files.

Interestingly, this cyber-incident comes just weeks before Berlin is set to hold elections. However, state senator Iris Spranger assured that the election infrastructure remains uncompromised. Recent turbulent international affairs have precipitated the advancement of the electoral date, but discussions around the vote have largely revolved around Iceland’s crucial fishing industry.