ON
← Back to feed
Cyberattack on Berlin: What could happen to the data
Germany🏛️ PoliticsCenter9/7/2026

Cyberattack on Berlin: What could happen to the data

A cyberattack occurred against the Berlin administration, potentially exposing sensitive data such as passwords, fines, and judicial records. According to IT administrator Joachim Selzer of the Chaos Computer Club (CCC), criminals could exploit this information for identity theft, extortion, or selling the data on the dark web. The severity depends on whether the passwords were stored in plain text or encrypted hash form. If stolen in plain text, they could be used immediately to breach other accounts. Encrypted hashes would require additional effort to crack. Criminals might also use the data to impersonate individuals for fraudulent activities or demand ransom payments by falsely claiming to have accessed personal files. As of now, there are no official reports identifying who carried out the attack.

A cyberattack on Berlin's administration resulted in the leakage of 5.8 terabytes of data in August 2026, according to reports. Former head of the Federal Office for Information Security (BSI), Arne Schönbohm, has criticized this incident as a clear failure in political oversight and called for accountability. The attack occurred during a period of heightened concern over cybersecurity within public institutions. Schönbohm, who led the BSI from 2016 until 2022, emphasized that information security should be a top priority for leadership. His comments were made in an interview published on September 8, 2026. Schönbohm highlighted the need for stronger measures to protect sensitive data held by government bodies. He pointed out that such breaches could have serious implications for both public trust and national security. Berlin’s governing mayor, Kai Wegner, was mentioned in relation to the incident, though specific actions taken by his administration following the breach were not detailed in available reports. The exact nature of the data leaked and the methods used by the attackers remain unclear based on current information. Authorities have yet to provide further updates on the investigation into the breach or any potential legal actions against those responsible.

How this report was made. Objective News wrote this report from 3 source articles, using AI-assisted synthesis under our methodology. It is our own text, not a copy of any single outlet. Read our methodology.

Responsible editor: Matej BašaSpotted an error? Report it

Go to the primary sources (1)

The official sources this coverage is built on. Read them directly to bypass framing.

4 reports

heise online logoheise onlineIndependentCenterFactual 92Objective 908/30/2026
Cyberattack on Berlin: What could happen to the data

A cyberattack occurred against the Berlin administration, potentially exposing sensitive data such as passwords, fines, and judicial records. According to IT administrator Joachim Selzer of the Chaos Computer Club (CCC), criminals could exploit this information for identity theft, extortion, or selling the data on the dark web. The severity depends on whether the passwords were stored in plain text or encrypted hash form. If stolen in plain text, they could be used immediately to breach other accounts. Encrypted hashes would require additional effort to crack. Criminals might also use the data to impersonate individuals for fraudulent activities or demand ransom payments by falsely claiming to have accessed personal files. As of now, there are no official reports identifying who carried out the attack.

Bias read (Center): The article presents technical details and expert opinions without overtly favoring any side. It discusses potential risks and criminal motivations but does not take a stance on the incident itself or assign blame. The framing remains neutral, focusing on the nature of the cyberattack and possible后果

Why factuality (92): This article confirms the resolution of the cyberattack, stating that the affected Senate departments have been reconnected to the network. It aligns closely with the primary source document and provides clear, factual updates on the status of the system recovery.

Why objectivity (90): The article maintains a neutral and factual tone throughout, presenting only the confirmed developments without adding speculative or emotionally charged commentary.

heise online logoheise onlineIndependentCenterFactual 85Objective 809/1/2026
Berlin: Passwords leaked and 12,000 systems scanned

The Berlin Senate confirmed that passwords for several specialized systems were leaked during a cyberattack targeting two of its departments, which began at least mid-August. The attack led to the exposure of clear-text password lists stored in Office files, along with thousands of contracts, legal documents related to ongoing cases, and scanned ID cards. The ransomware group 'Rhysida' claimed responsibility and posted screenshots on their dark web site, demanding 30 Bitcoins (approximately €2 million) as ransom. Although the affected departments were disconnected from the state network in early August, they were reconnected by late August, with officials stating the attack had been contained. However, concerns remain about potential exposure of personal or non-public data.

Bias read (Center): The article presents factual information about a cyberattack on Berlin's government agencies, including confirmation from the Senate spokesperson and details provided by the ransomware group. It does not exhibit overtly biased language, one-sided sourcing, or editorializing that would indicate a sla

Why factuality (85): The article reports on a cyberattack on Berlin's Senate departments, citing statements from the Senate spokesperson Christine Richter and confirming details from the ransomware group 'Rhysida' regarding stolen passwords and data. It aligns with the primary source document by providing specific dates

Why objectivity (80): The tone remains neutral, focusing on reporting facts and official statements. However, there is a slight emphasis on the severity of the breach and the potential risks, which could be seen as slightly more alarmist than purely objective.

Cicero logoCiceroIndependentCenterFactual 75Objective 659/7/2026
Cyberattack on Berlin administration - Information security has to be a top priority

A cyberattack on Berlin's administration resulted in the leakage of 5.8 terabytes of data in August. Former head of Germany’s Federal Office for Information Security (BSI), Arne Schönbohm, criticized this incident as a clear failure of political leadership and called for accountability. Schönbohm emphasized that information security must be a top priority for leaders. The article features an interview with Schönbohm conducted by Cicero journalist Clemens Traub, who has previously authored the book 'Future For Fridays?' published by Bastei Lübbe.

Bias read (Center): The article presents an interview with a former high-ranking official criticizing a cybersecurity failure in Berlin's administration. It does not exhibit overtly biased language, one-sided sourcing, or editorializing. The framing remains neutral, focusing on the expert's critique rather than takinga

Why factuality (75): The article reports on a cyberattack on Berlin's administration in August, citing 5.8 terabytes of data being leaked. It references former BSI chief Arne Schönbohm as a credible expert, aligning with cross-source consensus that this was a significant breach. However, no primary source documentation

Why objectivity (65): The article presents the cyberattack as a serious issue and quotes Arne Schönbohm, who criticizes political leadership. While the tone remains journalistic, there is a clear emphasis on the severity of the situation and the need for political accountability, which introduces some bias toward highlig

Süddeutsche Zeitung logoSüddeutsche ZeitungIndependent🔒CenterFactual: no official source document/info detectedObjective 809/5/2026
What is known so far about the Berlin administration's data leak - Politik - SZ.de

The article discusses the data breach affecting the Berlin administration, focusing on what is currently known about the incident. It highlights concerns over the security of personal data held by local government authorities and the potential implications for citizens' privacy. The piece examines the scope of the breach, the response from officials, and ongoing investigations into how the data was compromised. While the article provides factual updates on the situation, it does not offer detailed information on specific vulnerabilities or the exact number of affected individuals.

Bias read (Center): The article presents factual information about the data breach without overtly criticizing or praising any political entity. It focuses on reporting the available information without taking a clear ideological stance, thus maintaining a balanced approach.

Why factuality: no official source document/info detected

Why objectivity (80): The tone remains neutral and informative, presenting the situation without overt bias. The article focuses on reporting the known facts rather than taking sides or expressing strong opinions, maintaining a balanced approach.

How each side covered it

The same event, grouped by the political lean of the outlets covering it.

How each side covered it

Support independent, bias-aware news and unlock the social pulse, community voting, and every other Supporter feature.

Become a Supporter

Covered around the world

The same event as reported in other countries.

Covered around the world

Support independent, bias-aware news and unlock the social pulse, community voting, and every other Supporter feature.

Become a Supporter

Claims check

Key factual claims, and how many sources assert vs dispute each.

Claims check

Support independent, bias-aware news and unlock the social pulse, community voting, and every other Supporter feature.

Become a Supporter

Keep the news honest.

ObjectiveNews is reader-funded and ad-free — we show you the bias instead of hiding it. Support independent journalism for €4/month.

Become a Supporter

Related stories