BSI Warns of Phishing Attacks Following Cyber Attack in Berlin

Following a cyber attack on the state network in Berlin, the Federal Office for Information Security (BSI) has warned of a wave of phishing attacks. The hacker group Rhysida published numerous stolen data after the Berlin Senate refused to pay a ransom in the millions. Experts fear that the released information could be used for identity theft and other criminal activities. The attackers infiltrated the state network in August 2026, capturing sensitive data. The exact number of affected records is currently unclear, but it is assumed to be significant.

The hacker group Rhysida is known for its aggressive tactics and has previously conducted similar attacks on other institutions. The BSI has pointed out in a recent statement that the published data may contain personal information that could be used for phishing attacks. These attacks could target citizens, businesses, and public institutions. The agency advises being particularly cautious with emails and messages that request personal information. The Berlin authorities have already taken measures to enhance the security of the IT infrastructure.

These measures include increased monitoring and training for employees on dealing with cyber threats. The IT security situation in Berlin is described as tense, as the attackers may still be active. The hacker group Rhysida has previously made ransom demands and threatened to publish data. The Berlin Senate's decision not to pay a ransom could be seen as a signal to other institutions not to succumb to extortion. However, experts warn that this could also lead to an increase in attacks, as attackers may try to refine their methods.

The release of the data also has legal consequences. Data protection authorities are currently examining whether legal action needs to be taken against the Berlin administration due to inadequate security measures. The General Data Protection Regulation (GDPR) imposes heavy fines for violations of personal data protection. Reactions to the cyber attack are mixed. While some experts support the Senate's decision not to pay a ransom, others criticize the lack of preparedness for such attacks.

The discussion about IT security in public institutions has intensified due to this incident. The hacker group Rhysida has made a name for itself with its aggressive tactics. It is known not only for demanding ransom but also for publishing data to exert pressure on the affected institutions. The group has conducted several high-profile attacks on companies and authorities worldwide in recent months. The BSI has urged citizens to remain vigilant and report suspicious activities.

The agency has also provided informational materials to educate the public about the risks of phishing and identity theft. Raising awareness of cyber risks is considered crucial to minimizing the impact of such attacks. The Berlin administration has announced plans to review and potentially improve security measures. However, a specific timeline for implementing these measures has not yet been disclosed. The IT security situation remains tense, and authorities are working to protect the infrastructure.

The release of data by Rhysida could also impact the trust between citizens and authorities. Experts warn that trust in digital administration could suffer if citizens feel that their data is not adequately protected. The Berlin administration faces the challenge of regaining citizens' trust. On September 7, 2026, the BSI issued a warning urging citizens to review their security measures and report suspicious emails. The agency emphasizes that the security of personal data is of utmost priority.