Berlin Ransomware Leak Exposes State Secrets
Rhysida ransomware leaked 5.79 TB of Berlin state government data on the dark web after the city refused a 30 Bitcoin ransom.
The Rhysida ransomware group published 5.79 TB (about 1.44 million files) of Berlin state administration data on its leak site on August 28, 2026, after the city-state refused a 30 Bitcoin ransom. The claimed dataset includes personal data on 12,076 individuals, over 5,000 personnel files, payroll records, plaintext credentials for systems like PAYONE and Z_ADMIN, Bundesrat committee protocols, and documents allegedly containing state secrets. Leaked material reportedly covers national defense emergency plans, federal secret communication channels, a CBRN threat planning folder, and vulnerability analyses of Berlin's water supply. Berlin's government has activated a central crisis unit to review the leaked data and notify affected citizens and businesses.
- Rhysida claims 5.79 TB / 1.44M files stolen from Berlin's administration
- Ransom demand was 30 Bitcoin; the city-state refused to pay
- Leak includes CBRN planning, defense emergency plans, and alleged state secrets
- PII of 12,076 individuals, IBANs, passports, and plaintext passwords exposed
- Berlin activated a central crisis unit to assess and verify the leak
- Products
- PAYONEZ_ADMINGebäudAtlas
- Threat actors
- Rhysida
- Victims
- Berlin state government
- Organizations
- Bundesrat
- Countries
- Germany
From the original article
3 min read at securityaffairs.com
Berlin refused a 30 Bitcoin ransom, leading hackers to leak 6TB of sensitive state administration and national defense data on the dark web. When a ransomware gang dumps nearly six terabytes of state administration files onto the dark web, ignoring them does not make the problem go away. The Rhysida ransomware group recently carried out […]
By Pierluigi Paganini · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.