Hacks & Exploits
Berlin Rejects $2 Million Bitcoin Ransom Demand from Rhysida Hackers
Berlin’s state government has taken a firm stance against a ransom demand from the Rhysida ransomware group, opting not to pay 30 Bitcoin, roughly equivalent to $2 million. This decision follows the hackers’ release of 5.7 terabytes of stolen data on the dark web.
Rhysida, which has been active since 2023, initially opened bidding for the stolen files at 30 BTC. Despite the rising value of Bitcoin, Berlin officials, led by chief digital officer Florian Hauer, stated that the state would not succumb to blackmail, emphasizing the safety of its staff and residents as a top priority.
The ransom deadline expired on September 4, after which Rhysida published the full dataset. The attack, which began on August 14, forced Berlin to disconnect two Senate departments from its network, causing disruptions in housing benefit payments and family support until services were restored on August 23.
Authorities are currently assessing the potential impact of the data leak, with a central crisis unit and forensic specialists reviewing the released files. The State Criminal Police Office and Germany’s federal cybersecurity agency are leading the investigation, urging residents to report any incidents of fraud or identity theft.
As Berlin prepares for a state parliament election on September 20, officials have not disclosed the extent of the damage caused by the attack, and the review of the leaked data continues.
FAQ
What was the ransom demand from the Rhysida hackers?
The Rhysida hackers demanded a ransom of 30 Bitcoin, which was roughly equivalent to $2 million.
Why did Berlin refuse to pay the ransom?
Berlin's state government, led by chief digital officer Florian Hauer, refused to pay the ransom to avoid succumbing to blackmail and prioritized the safety of its staff and residents.
What happened after the ransom deadline expired?
After the ransom deadline expired on September 4, the Rhysida hackers published the full dataset of stolen data on the dark web.
What impact did the cyber attack have on Berlin's services?
The cyber attack forced Berlin to disconnect two Senate departments from its network, causing disruptions in housing benefit payments and family support until services were restored on August 23.
What actions are being taken in response to the data leak?
Authorities are assessing the potential impact of the data leak, with a central crisis unit and forensic specialists reviewing the released files, while the State Criminal Police Office and Germany’s federal cybersecurity agency lead the investigation.