BERLIN CONFIRMS DATA THEFT IN RHYSIDA RANSOMWARE ATTACK

The Rhysida ransomware operation claimed responsibility for breaching Berlin's systems and published the city on their leak portal, signaling intent to release stolen information unless demands are met. The confirmation marks an escalation in ransomware targeting government infrastructure across Europe. Rhysida has established itself as an active threat actor in recent months, conducting attacks against organizations globally. Berlin's city administration has not disclosed the scope of compromised data or specific extortion demands. Authorities are investigating the breach and coordinating response efforts. Rhysida typically operates under a double-extortion model, encrypting systems while simultaneously threatening to release sensitive data publicly. The group's appearance on Berlin's critical infrastructure signals growing pressure on municipal governments to strengthen cybersecurity defenses. No immediate statement regarding payment negotiations or law enforcement involvement has been released by Berlin officials.