Berlin Senate Chancellery: Sensitive Data May Have Leaked in Cyberattack After All

ICT Crisis Team Coordinates Response

The Senate Chancellery had publicly disclosed the attack on parts of the state IT system and simultaneously convened the ICT crisis team to secure the systems and contain the incident. The crisis team has since been coordinating the forensic investigation and the restoration of the affected components. According to official statements, initial protective measures were initiated immediately after the incident became known.

At the same time, the broadcaster Rundfunk Berlin-Brandenburg (RBB) reported on possible data leaks that could go beyond original assumptions. The broadcaster bases this on sources close to the Senate Chancellery. The authority itself has so far been reticent, pointing to ongoing reviews.

RBB Reports Point to Data Leaks

According to information from the Senate Chancellery, it is currently being examined which data stocks were actually compromised and which personal or security-relevant content could be affected. Since the analysis is ongoing, it cannot yet be conclusively stated whether and to what extent sensitive information actually leaked. The review is being carried out in close coordination with the responsible security authorities.

IT security experts see a growing risk to public administrations from such incidents. Attacks on state IT systems, in which access to internal networks is exploited, have been increasing for years according to experts. The consequences range from forced system shutdowns to the leak of personal data.

Possible Consequences for Administration and Citizens

The Senate Chancellery emphasizes that it is taking the incident seriously and has adjusted internal processes to prevent renewed compromise. At the same time, work is underway on an improved reporting chain so that parliamentary committees are informed earlier and more completely in the future.

Should it be confirmed that sensitive data has indeed leaked, this could also have an impact on ongoing administrative proceedings. Affected citizens would in that case need to be informed about possible risks and supported in protecting their data. Whether this becomes necessary depends on the outcome of the ongoing reviews.