Berlin Mayor Kai Wegner said on Friday that the city will not give in to the hackers' ransom demand after a sophisticated cyber‑attack exposed 5.79 TB of data.
The attack, carried out by the Rhysida group, was first detected between 7 and 12 August, forcing several city networks to shut down and halting services such as housing benefits applications for days.
Wegner did not disclose the exact ransom amount, but German media report that the group is demanding 30 bitcoin—roughly €2 million. Nevertheless, the mayor declined to negotiate.
Authorities, including state police, prosecutors and federal security services, are investigating the breach “with the utmost urgency” to determine the scope of the data leak, which may involve personal and other non‑public information.
The Rhysida group, known for targeting government institutions and private firms, has threatened to auction the stolen data after a countdown, echoing a similar tactics used in its 2023 British Museum breach.
Berlin’s cyber‑attack comes just a month before local elections, but state senator Iris Spranger stresses that election infrastructure remains secure.
