Berlin Government Refuses to Pay Ransom After State Network Data Theft

Berlin's state government has confirmed it is being targeted by extortionists following a data breach of the city's administrative network discovered in August. Officials have stated firmly that they will not meet the attackers' demands, a stance that aligns with widely recommended guidance against paying ransom to cybercriminals.

Follow-up forensic investigations have since uncovered additional data outflows linked to the Senate Department for Mobility, Transport, Climate Protection and Environment, suggesting the breach was broader than initially understood. This pattern—where the full scope of an intrusion only becomes clear during extended forensic review—is common in serious network compromises and highlights the importance of thorough post-incident investigation rather than assuming an early assessment is final.

While details on the initial attack vector have not been disclosed, the case underscores a broader trend of extortion-based attacks targeting government and public sector networks, where stolen data is used as leverage rather than, or in addition to, encryption. Organisations of all sizes should assume that any significant breach may involve more extensive data exposure than first detected.