Berlin Housing Cooperative Reports Ransomware Attack and Data Theft
Summary
Wohnungsgenossenschaft Neukölln eG says unknown attackers encrypted parts of its systems and copied member and business-partner data on April 18, 2026. The cooperative notified Berlin police and the data-protection authority and is restoring systems.
Key points
- The cooperative says unknown attackers hit its IT systems on April 18, 2026, using ransomware to encrypt parts of them.
- The organization says attackers also copied data, including member and tenant records, business-partner contact details, and cooperation documents.
- Affected systems were disconnected, and external IT security and forensic specialists were brought in.
- The cooperative reported the incident to Berlin's LKA and the relevant data-protection authority; system restoration is ongoing.
- The cooperative says it currently has no indication that bank data was stolen and warns members and partners to watch for phishing and suspicious messages.
Article Details
- Victim Organization
- Wohnungsgenossenschaft Neukölln eG
- Victim Domain
- gwneukoelln.de
- Incident Type
- Ransomware attack involving system encryption, copying of data, and a threat to publish data
- Incident Date
- 2026-04-18
- Disclosure Date
- 2026-04-23
- Data Types Exposed
- Tenant and member data
- Business partner company and contact data
- Agreements and documents relating to cooperation with business partners
- Affected Records
- Not disclosed
- Affected Data Size
- Not disclosed
- Operational Impact
- Parts of the victim's systems were encrypted and made inaccessible. The affected systems were taken offline, and restoration was ongoing at the time of disclosure.
- Ransom Or Extortion
- The victim reported that the attackers encrypted parts of its systems to extort it and threatened to publish parts of its data. No ransom amount or payment demand was disclosed.
- Claim Status
- confirmed