Germany: Hackers published data stolen from Berlin's urban systems

According to rbb24, Rhysida's hacker group, which had already admitted to the attack, has released around 1.4 million data in respective packages of a full size of 5.79 terabyte.

"All files have been placed in a publically available section – have fun while browsing, data hunter!" wrote the group on its dark web site, where many folders are visible. According to the information, work certificates, recruitment notices, worker assessments and their individual files are to be included. However, it has not yet been possible to verify this information and it is not clear whether it is all the data stolen in early August.

After the break-in, the group demanded a ransom of 30 bitcoins from the Berlin authorities, equivalent to around EUR 2 million. The amount was to be paid by 3:35 p.m. on Friday 4 September, but the Berlin authorities refused to give in to blackmail.

Rhysida is believed to be operating from Russia and east Europe, and was behind a cyber attack at the British Museum in 2023.

Due to the attack on 14 August, any of the urban net systems were shut down, which made it impossible for respective days to apply for housing allowances and make payments. In the second half of August, the weekly "Der Spiegel" published a screenshot from Rhysida on the dark web. The group claimed to have files containing, among others, contracts, confidentiality agreements (NDA), individual files, passwords and thousands of contact details of individuals.