In August 2026, the Rhysida ransomware group infiltrated the Berlin state network via a phishing email. It used valid login credentials that were stored unprotected in Word files and, between August 7 and 12, stole approximately 5.7 terabytes (1.44 million files) from two Senate administrative offices. The attack was not detected until August 13, due to a system malfunction. By the time the authorities were isolated, the data exfiltration had long since ended. After the ransom deadline expired in September, Rhysida published the data openly on the dark web: personnel files, plaintext passwords, disciplinary proceedings, highly sensitive security protocols, and detailed plans for critical infrastructure.<\/p>\n\n\n\n
Why the Attack Was So Severe<\/strong> Berlin was just the beginning. Close your gaps.<\/strong> Our consulting packages help you with: <\/p>\n\n\n\n In August 2026, the Rhysida ransomware group infiltrated the Berlin state network via a phishing email. It used valid login credentials that<\/p>\n
Although Berlin had reporting requirements, it lacked an adequate risk management system to detect attacks early on. In 2025, funding for IT security was even cut. What measures need to be improved: <\/p>\n\n\n\n
Check now to see if your measures meet the necessary requirements before an incident occurs.<\/p>\n\n\n\n