Cyberattack Disrupts Two Berlin Senate Administrations as Data Exfiltration Is Investigated

Summary
A cyberattack disrupted internet and external email access at two Berlin Senate administrations, which were isolated from the state network. Authorities are investigating conflicting reports about data exfiltration and a possible vulnerability used by the attackers.
Key points
- Berlin’s urban development and transport administrations were disconnected from the state network as a security measure.
- The disruption cut off internet and external email access and prevented employees from working from home.
- A source cited by Tagesspiegel said data may have been taken, but described it as publicly available geoinformation.
- RBB separately reported that sensitive data may have been taken and that attackers apparently exploited a vulnerability in the IT operations of the urban development administration.
- The reported data access and the possibility of a broader attack remain under investigation.
- Berlin police, prosecutors and the BSI are involved; a crisis team is coordinating the response.
Article Details
- Victim Organization
- Berlin Senate city development administration and traffic administration
- Incident Type
- Cyberattack on the Berlin state network; a report attributed the attack to exploitation of a vulnerability in the IT operations of the Senate building administration.
- Data Types Exposed
- Geoinformation data, reported by a source familiar with the incident as having been exfiltrated; the article says this data was also publicly available.
- Sensitive data, reported by RBB as possibly exfiltrated; this was not confirmed in the article.
- Operational Impact
- The affected administrations were disconnected from the state network as a precaution. Internet and external email access were disrupted, and employees could not work from home. Authorities said the investigation was ongoing and considered whether additional administrations were affected.
- Claim Status
- confirmed
