Rhysida Publishes Berlin Government Data After €2m Extortion Demand Refused
Rhysida published 5.7 TB of Berlin state government data, including sensitive CBRN emergency plans, after the state refused a €2m ransom demand.
The Rhysida ransomware gang leaked roughly 5.7 TB — about 1.4 million files — stolen from Berlin's state network after the government declined to pay 30 bitcoins (about €2m) by the September 4 deadline. The dump reportedly includes sensitive state emergency plans for terrorist attacks and CBRN disaster scenarios in a folder titled 'AG CBRN-Rahmenplanung', plus personnel files, absence lists, payroll data, and home addresses, potentially affecting tens of thousands of people. Berlin says there are no indications the state network remains compromised and will notify affected individuals on a risk-based basis after forensic analysis.
- Rhysida demanded 30 BTC (€2m) with a September 4 deadline; Berlin refused to pay
- Leak includes AG CBRN-Rahmenplanung folder with sensitive state disaster plans
- Data contains personnel files, absence lists, payroll data, and home addresses
- Rhysida, active since May 2023, previously hit the British Library and US healthcare providers
- Threat actors
- Rhysida
- Victims
- State of Berlin
- Organizations
- British LibraryCookeville Regional Medical Center
- Countries
- Germany
From the original article
2 min read at infosecurity-magazine.com
The ransomware group’s published dataset reportedly includes Berlin state employee data, as well as highly sensitive emergency plans
By James Coker · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.