Berlin confirms multimillion-euro ransom demand after cyberattack

Berlin is facing a ransom demand of about 2 million euros after a cyberattack on the German capital’s administrative data network, with the stolen information now offered for sale on the dark web.

A group calling itself Rhysida has claimed responsibility and says it holds 5.7 terabytes of stolen data, a Senate administration spokeswoman said. The group began auctioning the data last Friday, setting a minimum bid of 30 bitcoins, worth about 2 million euros. The auction is due to end on Friday.

“

It is correct that a group named Rhysida has claimed responsibility for the attack and says it possesses 5.7 terabytes of stolen data.

Berlin officials assume the data could be sold again or published in full or in part after the auction. The information taken includes sensitive data, such as personal details.

“

The minimum bid is 30 bitcoins, or around two million euros. The auction runs until Friday.

The Senate considers Rhysida a known, highly professional group linked to cyberattacks against targets in northern and southern Europe, Germany and the United States in recent years. Officials said they had found no evidence of connections to Russia or the Russian state, although they could not exclude such links.

Berlin became aware of the attack on Aug. 14. Current findings indicate that large amounts of data left the system between Aug. 7 and Aug. 12. Governing Mayor Kai Wegner said last Friday that Berlin would not allow itself to be blackmailed.

“

It must be assumed that the data will then be resold or published in full or in part.