The ransomware group Rhysida has leaked nearly six terabytes of highly sensitive data from Berlin's state administration onto the dark web, following the German capital's refusal to pay a massive cryptocurrency ransom. The enormous leak comprises 1,439,893 files and was published shortly after a countdown expired at approximately 3:35 p.m. on Friday. The cybercriminals had previously demanded a ransom of 30 Bitcoin, valued at around two million euros, but the Berlin Senate ignored the ultimatum, maintaining its strict policy against giving in to blackmail.
Among the published files is a folder labeled "AG CBRN-Rahmenplanung," which outlines plans regarding chemical, biological, radiological, and nuclear threats. The exposure of this folder means that highly sensitive information about potential national threat scenarios is now publicly accessible and could be viewed by foreign intelligence services or terrorist organizations.
Investigative journalist Lars Winkelsdorf sounded the alarm on the social media platform X, warning that the cyberattack is "of a magnitude that threatens the state." According to Winkelsdorf, the compromised documents include files from the State Criminal Police Office (LKA) relating to investigations, plans concerning a state of defense, and secret communication channels of the federal government designed for emergency "end of the world" scenarios.
In addition to classified security plans, a vast amount of personal data has been leaked, specifically targeting state civil servants. This compromised information includes birth certificates, home addresses, telephone numbers, and what appear to be employee absence lists.
Despite the immense scale of the leak, there has been almost no response or public statement from Berlin's political leaders and administrative officials. Shortly after the countdown ended, the hacking group began circulating lists of the leaked file names on social networks to demonstrate the vast scope of the siphoned information.
The extortionists had previously threatened publication on their leak site and demanded a ransom of 30 Bitcoin, around two million euros. They set a countdown that expired at about 3.35 pm on Friday. The Berlin Senate had already made it clear before the ultimatum expired that, as a matter of principle, it does not giv
