Berlin’s mayor, Kai Wegner, publicly announced that the city would not surrender to a cyber‑extortion demand, even as cyber‑pirates—believed to be from eastern Europe—have hijacked city systems and extracted 5.79 terabytes of data.
The attackers, linked to the Rhysida group that terrorised the British Museum in 2023, are holding out for 30 Bitcoin, roughly €2 million. The group claims the seized material includes personal data that could compromise privacy for a range of citizens, including the city’s indigenous communities who rely on public services for health, housing, and cultural preservation.
City officials worked to shut down vulnerable departmental networks on 14 August, causing days of service interruption in housing benefits and transport. While Berlin’s investigations continue, state police, prosecutors and federal security services are treating the breach with “utmost urgency” and probing “the scope of the compromised data.”
In the broader context, the city’s cyber‑attacks arrive just a month before the federal election, heightening fears that electoral infrastructure might also be compromised—although such claims have been dismissed by state senator Iris Spranger.
The incident underscores a growing global threat: cyber‑criminal ensembles now routinely target public‑sector data, raising alarms about the safety of sensitive demographic information, especially for marginalized groups whose data may be stored in generic municipal databases without nuanced safeguards.
Berlin’s stance— refusing payment and bolstering investigation—signals a commitment to digital sovereignty, reminding regulators that safeguarding the privacy and heritage of indigenous peoples is as crucial as defending national infrastructure from ransomware.
