Hackers wanted 30 Bitcoin, Berlin said no. Then came the 6TB data dump

Berlin’s state government is facing a major data breach after the Rhysida ransomware group released around 5.7 terabytes of stolen government data following the city’s refusal to pay a 30 Bitcoin ransom. The leaked material is being examined for sensitive information involving public employees, residents and businesses.

According to Reuters, the hackers had demanded 30 Bitcoin, then offered the stolen data for auction before publishing it after the deadline expired. The group had claimed it had obtained emails, phone numbers, passwords, contracts and other sensitive material from Berlin’s state administration.

Berlin officials had rejected the ransom demand, saying the city would not give in to extortion. The group subsequently began releasing the stolen material online, prompting the government to launch an emergency response to assess what information had been exposed.

The breach affected two Senate departments, including those responsible for urban development, housing, mobility, transport and environmental affairs. Authorities have been working to determine whether personal information was among the stolen files and what risks the disclosure could create.

The situation worsened on September 6 when attackers released another package of data. Berlin said the latest material included access credentials, prompting officials to strengthen security measures in the affected administration. Some government digital services could face temporary restrictions as a result.