GoKawiilRhysida gang claims theft of 5.79TB from Berlin city administration
Berlin officials confirmed cybercriminals are attempting to extort the city after the Rhysida ransomware gang publicly listed it on their leak site last Friday, following an intrusion discovered in mid-August. The attackers claim to have stolen nearly 1.44 million files totaling 5.79TB, including government, legal, financial, HR, and health records, along with credentials belonging to senior officials and infrastructure security assessments. Mayor Kai Wergner said Berlin will not pay, and law enforcement including the State Criminal Police Office and federal security agencies are investigating.
GoKawiil's interpretation of the reporting above, not reported fact.
The breadth of allegedly stolen data—from classified government material to critical infrastructure assessments on the water supply—suggests a serious breach of public-sector security with implications beyond Berlin's administration. Rhysida's use of GDPR penalties as leverage highlights how ransomware groups increasingly weaponize privacy law to pressure victims into paying. A refusal to pay could result in sensitive government and citizen data being published publicly.
- Rhysida claims to have exfiltrated 5.79TB (1.44 million files) from Berlin's city network.
- Stolen data allegedly includes credentials, banking details, health records, and classified government documents.
- Berlin's mayor has refused to pay the ransom as law enforcement investigates the breach.
YubiKey 5 NFC Security Key — When ransomware crews walk off with plaintext credentials and password vaults, passwords alone clearly aren't enough. The YubiKey 5 NFC adds a physical second factor to accounts like Google, Microsoft and password managers, so stolen logins are far less useful to attackers. It's pocket-sized, works over USB-A and NFC taps with a phone, and needs no batteries.
See YubiKey 5 NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-08-31
Published there as: “Berlin confirms data theft after Rhysida ransomware attack claims”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.