Reported by 4 outlets
Berlin Won’t Pay Extortion Group Claiming Data Theft
Why this score
- Breadth
- 2.00 / 2.0 · 4 sources
- Authority
- 1.80 / 2.0 · best outlet weight
- Severity
- 1.30 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.49 / 0.6 · time to second source
- Recency
- × 0.00 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.0 / 10 = base × recency + community
Timeline
-
original reporting
Berlin Won’t Pay Extortion Group Claiming Data Theft
securityweek.com · 43d ago · August 31st, 2026
-
update from bleepingcomputer.com
Berlin confirms data theft after Rhysida ransomware attack claims
bleepingcomputer.com · 43d ago · August 31st, 2026
Berlin’s city administration has confirmed that cybercriminals are attempting to extort the city after the Rhysida ransomware gang listed it on their data leak site. The attack was discovered in mid-August, and the threat actor claimed it publicly last Friday, on August 28. Kai Wergner, the Mayor of Berlin, stated that the city will not pay the attacker, and the State Criminal Police Office, the public prosecutor's office, and federal security agencies are now investigating the incident. Rhysida ransomware has been active since mid-2023, targeting healthcare organizations , state governments , education institutes , and critical infrastructure . The threat actor claims to have exfiltrated 5.79 TB of data, comprising approximately 1.44 million files, from Berlin’s administrative network. According to the attacker, they exfiltrated the following types of information: Government, legal, financial, contractual, HR, infrastructure, health, and mapping records. Thousands of names, email addresses, phone numbers, and 148 IBANs. Plaintext credentials, database accounts, payment-system data, password vaults, and credentials belonging to senior officials. Personnel files, payroll information, administrative-offense records, email archives, SQL database dumps, identity documents, and banking information. Documents related to disciplinary proceedings and other named cases. Allegedly classified or sensitive government material, including Bundesrat committee records and information about h
-
update from www.europesays.com
https://www. europesays.com/3242721/ Berlin Responds After Data Leaked by Cyber Extortion Group # berlin # Cybersecurity # DISINFORMATION #
www.europesays.com · 34d ago · September 10th, 2026
https://www. europesays.com/3242721/ Berlin Responds After Data Leaked by Cyber Extortion Group # berlin # Cybersecurity # DISINFORMATION #
via Mastodon https://www.europesays.com/3242721/
-
update from tech-insider.org
Assess your own exposure now — if sensitive government data crossed your network perimeter, treat the leaked cache as hostile and begin comp
tech-insider.org · 30d ago · September 13th, 2026
Assess your own exposure now — if sensitive government data crossed your network perimeter, treat the leaked cache as hostile and begin comp
via Mastodon https://tech-insider.org/rhysida-ransomware-berlin-government-breach-2026