Cyberattack on Berlin: Rhysida Demands Ransom

Berlin has become the target of a massive cyberattack carried out by the ransomware gang Rhysida. The hackers have seized nearly six terabytes of partially critical data and are demanding a ransom of 30 Bitcoin, equivalent to around two million euros. The attackers have set a deadline for payment to prevent the data from being published or sold. The attack on the capital was made public on August 30, 2026, when several authorities and institutions were affected by its impact.

The Rhysida group has previously distinguished itself through similar attacks and is known for its aggressive tactics. Experts warn that such attacks on critical infrastructures may increase. Berlin authorities have promptly taken measures to minimize the impact of the attack. IT security teams are working around the clock to secure systems and verify data integrity. Initial analyses suggest that the attackers exploited vulnerabilities in network security to gain access to sensitive information.

In their ultimatum, the Rhysida gang emphasized that they would publish the data within 72 hours if the ransom is not paid. This threat has led to heightened concern among the affected institutions, as the published data could potentially contain confidential information about citizens and governmental processes. The police and the Federal Office for Information Security (BSI) have launched investigations. It is suspected that the attackers are operating through a botnet composed of a variety of compromised devices. This technique allows the hackers to obscure their identity and the origin of the attacks.

The ransomware gang Rhysida has previously conducted several high-profile attacks on companies and institutions across Europe. Their approach often involves infiltrating networks, encrypting data, and extorting ransom. The group has made a name for itself through its professionalism and the use of advanced encryption techniques. The Berlin government has announced that it will keep the public informed about the progress of the investigations. Experts advise strengthening IT security measures across all sectors to prevent future attacks.

Incidents in Berlin could serve as a wake-up call for other cities and institutions to review their security protocols. The impact of the attack is already being felt, as some public services have been temporarily suspended to protect the systems. Citizens are urged to handle their personal data with caution and report any suspicious activities. Authorities are working to stabilize the situation as quickly as possible and ensure data security. The Rhysida gang has proven to be particularly persistent in cybercrime.

Their attacks are often well-planned and executed, making them one of the most feared groups in the scene. The current situation in Berlin could reignite the discussion about cybersecurity and the protection of critical infrastructures. The deadline for the ransom payment ends on September 2, 2026, increasing the pressure on Berlin authorities to act swiftly.