Following the publication of data stolen in a major cyberattack on Berlin’s state administration, the Senate has established a central information and contact point for citizens who believe they may be affected. The service provides information about the incident, explains what is currently known about the compromised data and gives guidance on what people can do if they suspect their personal information has been exposed.
The official Berlin information page for citizens affected by the cyberattack provides the latest information and contact details.
The new service is intended to give Berlin residents a single place to find verified information about the cyberattack. The page includes several email contacts, background information on the incident, practical guidance and answers to frequently asked questions. Berlin Chief Digital Officer Florian Hauer said the central contact point was established to provide citizens with support and reliable information following the attack.
Authorities are continuing to examine the stolen files. Individuals identified as affected during the analysis are to be contacted by the responsible Senate administrations on a risk-based basis and in accordance with applicable data-protection requirements.
The cyberattack affected the Berlin Senate Department for Urban Development, Building and Housing and the Senate Department for Mobility, Transport, Climate Protection and the Environment. The data was taken from the administration during an attack that occurred between August 7 and 12, before the affected networks were separated on August 14.
The exact scope of the compromised information is still being investigated. According to Berlin’s data protection authority, potentially affected information can include names, addresses and dates of birth, as well as correspondence with the relevant Senate administrations. Depending on a person’s dealings with the authorities, bank details, email addresses, telephone numbers and copies of submitted documents may also be involved.
Reports have also referred to highly sensitive material allegedly contained in the leaked files, including private mobile numbers, birth certificates, personnel records and certificates of good conduct. Data relating to security measures and the expansion of the Federal Chancellery has also reportedly been included.
The group behind the attack demanded a ransom of 30 Bitcoin, worth roughly €2 million at the time. Berlin rejected the demand. The attackers subsequently published the stolen material on the dark web. A further data package was published on September 6 and reportedly included access credentials. Berlin authorities said this prompted additional precautionary measures within the affected administration.
Anyone who has concrete evidence that their data has been published or is being used for fraud or identity theft should report the matter to the police. A report can be filed through the Berlin Police Internetwache or at any local police station. Citizens can also consult the Berlin data protection authority’s guidance on the cyberattack, which explains how to assess possible exposure and provides further recommendations, including checking financial transactions and remaining alert to phishing attempts.
The investigation and forensic analysis of the stolen data remain ongoing. Authorities say affected individuals will be informed as reliable findings about their personal data become available.
From breaking news to thought-provoking opinion pieces, our newsletter keeps you informed & engaged.
By subscribing, you agree to our Terms & Conditions and Privacy Policy.
