Back to today’s briefing

Story perspectives

Berlin Refuses Rhysida Ransom as Data Auction Starts

8/29/2026

39 7 Full Breakdown

Summary

Story summary

Rhysida ransomware group blackmailed Berlin city government, demanding 30 bitcoin (?€2 million) after stealing data.
Mayor Kai Wegner and Senator Iris Spranger said Berlin will not pay the ransom.
Rhysida announced it will auction 5.79 terabytes of stolen data within seven days, starting at 30 bitcoin.
Berlin shut down its mobility, environment, and urban development departments on 14 August as a response.

History

Historical Context

In May 2017 the WannaCry ransomware, spread via the NSA-derived EternalBlue exploit, infected over 300,000 Windows computers in 150 countries and forced the UK NHS to suspend services, costing about £92 million. The attack prompted the UK and German governments to ban ransom payments and accelerate cyber-security legislation, a stance echoed when the Rhysida group demanded 30 bitcoin from Berlin’s municipal departments in August 2024.

1 of 2

Story summary

Rhysida ransomware group blackmailed Berlin city government, demanding 30 bitcoin (?€2 million) after stealing data.
Mayor Kai Wegner and Senator Iris Spranger said Berlin will not pay the ransom.
Rhysida announced it will auction 5.79 terabytes of stolen data within seven days, starting at 30 bitcoin.
Berlin shut down its mobility, environment, and urban development departments on 14 August as a response.

1 / 2