Berlin hack: Housing benefit office data released on the darknet
The hacker group Rhysida published stolen data from the Berlin administration on the darknet on Friday afternoon. According to the Senate Chancellery, around 1.44 million files were made accessible in several packages; the perpetrators claim the total volume is approximately 5.8 terabytes. Previously, a ransom of 30 Bitcoin—equivalent to around two million euros—had been demanded. The Senate refused to pay, leading to the release of the data.
Two Senate departments are affected: the Senate Department for Urban Development, Building and Housing, and the Senate Department for Mobility, Transport, Climate Action and the Environment. Both were disconnected from the state network for about a week starting August 14. During this time, it was impossible to apply for or receive housing benefits in Berlin, among other services. Anyone who submitted an application or documents to either of these offices may be affected. The Senate Chancellery explicitly mentions that the data includes personal information of citizens and companies, not just state employees.
Exactly what the packages contain has not yet been fully analyzed. So far, items identified include names, addresses, dates of birth, telephone numbers, bank details, and copies of documents that applicants were required to submit. An IT security expert points out that the files also contain signature samples, which are of interest for identity theft. Misuse is expected in the medium term rather than immediately. The administration intends to inform affected individuals individually after the analysis is complete; this may take some time.
Until then, the following applies: change your passwords, especially for administrative and online services, and use a different, secure device to do so. Check bank and credit card transactions regularly. Be particularly vigilant against phishing and do not open links from unexpected messages or unknown senders. Payments to extortionists should not be made. In the event of misuse of cards, ID functions, or mobile numbers, the emergency blocking number 116 116 can help. Anyone who knows for certain that their data has been published, or who is contacted by the perpetrators, should file a report with the police and document the incident.
Those who wish to know whether their data has been processed can submit an informal request for information to the relevant Senate department. In principle, they must respond within one month. If no information is provided, a complaint can be filed with the Berlin Commissioner for Data Protection and Freedom of Information.