© dpa
Following the cyberattack on Berlin’s state network, the deadline set by the alleged perpetrators in their blackmail attempt is about to expire. It cannot be ruled out that the stolen data will subsequently be published, possibly as early as Friday, 4 September.
Personal data relating to employees of the State of Berlin, as well as to citizens and businesses, may be affected. This was announced by the Press and Information Office of the State of Berlin.
Anyone who discovers that their personal data has been published should report the matter to the police. This can be done via the Berlin Police Internet Helpdesk or at any local police station. If individual data subjects are identified, they will be informed directly by the relevant Senate departments. This is done on a risk-based basis whilst ensuring data protection. The relevant Senate departments have also set up a point of contact for their staff.
A group calling itself Rhysida has claimed responsibility for the attack and claims to have stolen 5.7 terabytes of data. Since last Friday, the alleged perpetrators have been attempting to blackmail the State of Berlin and are offering the data for auction. The minimum bid was 30 bitcoins, equivalent to around two million euros. There are currently no indications that the state network remains compromised. Investigations are ongoing. The Senate is working in collaboration with state and federal security authorities, including the State Criminal Police Office, the Berlin Public Prosecutor’s Office and the Federal Office for Information Security (BSI).
Florian Hauer, Chief Digital Officer for the State of Berlin, emphasised: “The State of Berlin will not give in to blackmail. The safety of the State of Berlin’s staff and the people of Berlin is our top priority.” He added that they were working flat out to further secure the state network.