Berlin State Data Leak Exposes Military and CBRN Plans, Mayor Refuses Ransom

September 8, 2026 at 12:00 AM2 min

This digest was compiled by AI from multiple sources — links to the originals are below.

The Rhysida cyber-extortion group leaked terabytes of sensitive data stolen from Berlin's state administration on Friday, after Mayor Kai Wegner refused to pay a 30-bitcoin ransom. The leaked data reportedly includes classified OPLAN military coordination plans and CBRN response frameworks. German officials warn the information could be exploited by Russia or China for sabotage or influence operations.

Key Facts

Rhysida demanded 30 bitcoins, worth about $2.4 million, from Berlin's state administration.
Mayor Kai Wegner, a member of the center-right CDU, refused to pay the ransom.
The leaked data reportedly includes classified OPLAN military-civil coordination plans and a CBRN response framework.
CDU parliamentarian Roderich Kiesewetter called the attack an 'unprecedented catastrophe' and warned of exploitation by Russia or China.
German Armed Forces sources told Bild that OPLAN itself was not at risk despite the 'data breach of epic proportions'.

Ransom Demand and Refusal

Rhysida dumped the stolen data online on Friday after attempting to pressure the state into paying 30 bitcoins, worth about $2.4 million. Berlin Mayor Kai Wegner, a member of the center-right Christian Democratic Union, refused to pay the ransom. The exact composition of the leaked data remains unclear due to the sheer volume of stolen information.

National Security Implications

Roderich Kiesewetter, a CDU member of Germany's federal parliament, described the attack as an 'unprecedented catastrophe'. He warned that the leaked data, covering total defense, civil-military cooperation, OPLAN, and critical infrastructure protection, could be exploited by Russia, China, or terrorists. Kiesewetter stated that Russia's modus operandi and the rise in state-sponsored terror attacks suggest Russia will exploit this hack-and-leak incident. Bild reported that the leaked data included a folder entitled 'AG CBRN-Rahmenplanung', referencing secret plans for chemical, biological, radiological, and nuclear incident response. Anonymous high-ranking German Armed Forces sources told Bild that OPLAN was not at risk despite the 'data breach of epic proportions'.