Berlin’s Response to Ransomware Attack
Berlin refused to pay a ransom of 30 Bitcoin, approximately EUR2 million, and subsequently released stolen data on Friday. The city now manages four dedicated task forces to address this incident:
- Two police task forces focusing on compromised departments responsible for transport and housing.
- A joint departmental unit formed by the affected departments.
- A crisis management team within the housing department to support staff.
- An external legal adviser engaged to handle confidential matters.
This coordinated response, detailed in a press release from Berlin’s Senate Chancellery on 3 September, aims to mitigate damage and support those impacted.
The affected departments include:
- Mobility, Transport, Climate Protection, and Environment.
- Urban Development, Construction, and Housing (including building permits and housing benefits).
Berlin emphasizes that national defense materials are not included in the compromised data, as it is a city-state with distinct responsibilities from the federal government.
The city’s response includes:
- Internal task forces established by the State Criminal Police Office and transport department, later combined into a joint unit.
- Crisis management within the housing department and external legal support for sensitive matters.
- Ongoing forensic investigations to determine the full extent of data taken.
- Counseling services offered to affected residents (via a budget allocation).
Berlin encourages individuals whose data may be compromised to file a criminal complaint and directly contacts affected individuals under GDPR and local data protection laws. The city emphasizes that every piece of data in the attack’s possession belongs to the attackers, not from any breach within Berlin’s network.