Berlin Confirms Data Theft After Rhysida Ransomware Attack Claims
Berlin confirms data theft after Rhysida ransomware attack claims. City administration will not pay the attacker and is investigating the incident.
Intelligence analysis by Qwen 2.5 (3B)
Berlin's city administration confirms a data theft incident after Rhysida ransomware claimed it. The threat actor is demanding payment to prevent the release of exfiltrated data.
A bad guy used a computer trick called ransomware to get into Berlin's city computer system. They took lots of information, like names and money details, and said they would give it back only if Berlin gave them money. Berlin said they won't give the money and are looking into it.
Analysis
{"heading_1":"Details of the Attack","subheading_1":"Data Exfiltration","content_1":"Rhysida ransomware claims to have exfiltrated 5.79 TB of data, including 1.44 million files. The data includes government, legal, financial, and personal information.","subheading_2":"Types of Information Exfiltrated","content_2":"The attacker claims to have exfiltrated information related to government, legal, financial, contractual, HR, infrastructure, health, and mapping records. They also claim to have exfiltrated plaintext credentials, database accounts, payment-system data, and other sensitive information.","subheading_3":"Victim's Response","content_3":"The Berlin Mayor, Kai Wergner, stated that the city will not pay the attacker and that the State Criminal Police Office, the public prosecutor's office, and federal security agencies are now investigating the incident."}
Key points
- Berlin's city administration confirmed a data theft incident after Rhysida ransomware claimed it.
- The threat actor claims to have exfiltrated 5.79 TB of data, including 1.44 million files.
- The data includes government, legal, financial, and personal information.
If Berlin can prevent the ransomware from getting into their system in the future, they won't have to pay the bad guy.
If the bad guy gets more information or threatens to release it, Berlin might have to pay to keep the information private.
