Hackers in Berlin hacked into the city's computer systems, now demanding a ransom
Hackers successfully infiltrated Berlin's computer systems earlier this month, stealing data and demanding a ransom of 30 bitcoins (approximately two million euros). Mayor Kai Wegner stated that the city would not pay the ransom, emphasizing that Berlin cannot be extorted. The attack led to the temporary shutdown of some online services, including applications for housing supplements. The hacker group, identified as Rhysida, claims to operate from Russia and Eastern Europe and has previously targeted institutions like the British Museum. They announced plans to auction off 5.79 terabytes of stolen data if the ransom is not paid within seven days. Forensic investigations revealed additional data breaches, potentially involving personal information. The group has been linked to over 200 cyberattacks globally since 2023.
Hackers have breached municipal computer systems in Berlin and are demanding a ransom, according to city officials. The attack, which occurred earlier this month, has forced some online services to be temporarily shut down while investigators determine the extent of the data stolen. City mayor Kai Wegner stated unequivocally on Friday that Berlin will not pay the ransom demanded by the attackers. The breach reportedly took place between August 7 and 12, with additional data exfiltration later discovered within the Berlin Department of Transport and Environment. On August 14, two departments had their networks taken offline, disrupting the processing of housing supplements and other payments for several days. Forensic analysis revealed further unauthorized access to sensitive information, though the exact nature and scope of the compromised data remain under investigation. According to reports, the hackers are associated with the group Rhysida, believed to operate from Russia and Eastern Europe. This group previously targeted the British Museum in 2023, breaching its systems and stealing around 500,000 files before releasing personal data of visitors, patrons, and employees onto the dark web after the museum refused to pay a ransom. Now, they claim to possess 5.79 terabytes of stolen data from Berlin and plan to auction it publicly in seven days unless the city pays 30 bitcoins, approximately €2 million, as ransom. Rhysida’s website on the dark web features screenshots showing the group's claims of accessing confidential documents, including contracts, confidentiality agreements, personnel records, passwords, and thousands of personal contacts. A countdown timer is displayed alongside the announcement of the upcoming auction, with the ransom demand matching the amount Berlin is being asked to pay. City authorities confirmed that the initial data breach occurred during the period mentioned, but they have not officially named the suspects behind the cyberattack. Local police, prosecutors, and federal security agencies are conducting an intensive investigation into both the perpetrators and the content and scope of the affected data. Mayor Wegner emphasized that the city would not yield to the ransom demands, stating, “Berlin cannot be extorted.” The timing of the attack coincides with local elections in Berlin, but Senator Iris Spranger assured residents that the electoral infrastructure was not compromised. Despite this reassurance, concerns remain over the potential exposure of private or non-public data, with officials cautioning that such possibilities cannot be ruled out. Authorities continue to assess the impact of the breach, focusing on identifying which specific systems were accessed and what kind of information might have been exposed. Meanwhile, the public is advised to remain vigilant regarding any suspicious activity related to their personal data. Investigations are ongoing, with law enforcement agencies working closely with cybersecurity experts to trace the origins of the attack and prevent future incidents. The situation highlights the growing threat posed by sophisticated cyberattacks targeting critical infrastructure and government systems. As the investigation unfolds, more details about the breach and its consequences are expected to emerge, offering insight into how such attacks can be mitigated in the future.
Go to the primary sources (1)
The official sources this coverage is built on. Read them directly to bypass framing.
Hackers successfully infiltrated Berlin's computer systems earlier this month, stealing data and demanding a ransom of 30 bitcoins (approximately two million euros). Mayor Kai Wegner stated that the city would not pay the ransom, emphasizing that Berlin cannot be extorted. The attack led to the temporary shutdown of some online services, including applications for housing supplements. The hacker group, identified as Rhysida, claims to operate from Russia and Eastern Europe and has previously targeted institutions like the British Museum. They announced plans to auction off 5.79 terabytes of stolen data if the ransom is not paid within seven days. Forensic investigations revealed additional data breaches, potentially involving personal information. The group has been linked to over 200 cyberattacks globally since 2023.
Bias read (Center): The article presents factual information about a cyberattack on Berlin's systems, including quotes from officials, details about the hackers' demands, and the impact of the breach. It does not exhibit clear bias toward any political side but focuses on the technical and administrative aspects of the
Why factuality (95): The article provides specific details such as the mayor's statement, the amount of Bitcoin requested (30 BTC worth ~2 million euros), the involvement of the group Rhysida, and the timeline of events including when data was exfiltrated and systems were taken offline. These details align with the cros
Why objectivity (85): The article presents the facts in a mostly neutral manner, quoting officials and citing external sources like BBC and Reuters. However, it uses some emotionally charged phrases like 'Berlina ni mogoče izsiljevati' and mentions the threat of public auctioning of data, which may imply a stance against
The article reports that hackers accessed sensitive data belonging to Berlin authorities and made it available for auction. The incident highlights concerns over cybersecurity vulnerabilities in governmental systems and raises questions about data protection practices. The breach potentially exposes personal and confidential information, prompting calls for increased security measures. While the article does not specify the extent of the data compromised or the identity of the hackers, it underscores the risks associated with digital infrastructure in public administration.
Bias read (Center): The article presents a factual report on a cyberattack without overtly criticizing or praising any political entity. It focuses on the event itself rather than taking a stance on policy responses or attributing blame to specific groups. The tone remains neutral, emphasizing the implications of the数据
Why factuality (80): The article confirms the main event, hackers putting sensitive data up for auction, but lacks specific details such as the name of the hacker group, the amount of Bitcoin requested, or the timeline of the attack. It also doesn't mention the city's response or the involvement of law enforcement. This
Why objectivity (75): The title suggests a clear narrative that hackers have put data up for auction, which is factual but slightly sensationalized. The article is brief and lacks quotes or attribution, making it more summary-like than analytical. There is no explicit bias, but the lack of nuance and reliance on a single
The article reports on a cyberattack targeting Berlin's municipal systems, where hackers have demanded a ransom of 30 bitcoins (approximately two million euros). The attack, which began in early August, compromised several city departments including urban development, construction, housing, public transportation, and environmental services. Hackers stole access credentials and approximately 5.79 TB of data, preventing staff from working remotely. The group behind the attack, identified as Rhysida, has threatened to release the stolen data unless the city pays the ransom. Security experts suggest the group may be Russian, citing past attacks on institutions like the British Museum. The city has not confirmed payment and has established a crisis team to address the situation.
Bias read (Progressive): The article frames the cyberattack as a serious security threat to Berlin’s infrastructure, emphasizing the potential exposure of sensitive data if the ransom is not paid. While it presents factual information about the breach and the involvement of a potentially Russian group, it does not provide a
Why factuality (75): The article provides a reasonably accurate summary of the cyberattack on Berlin's municipal authorities, including the timeline, ransom demand, and involvement of the Rhysida group. However, it contains some inaccuracies such as stating the attack began 'od začetka avgusta' (from the start of August
Why objectivity (50): The article has a clear bias against the situation, using phrases like 'Ne želijo plačati' (They don't want to pay) and 'Plačilo v nobenem primeru ne pride v poštev' (Payment will never be considered), showing a strong stance against paying the ransom. The comments section further adds subjective an
How each side covered it
The same event, grouped by the political lean of the outlets covering it.
progressive
center
conservative
★
How each side covered it
Support independent, bias-aware news and unlock the social pulse, community voting, and every other Supporter feature.
Slovenia
