The initial breach was detected in August, prompting an emergency response and forensic investigation. As part of that ongoing analysis, authorities have since uncovered additional data exfiltration tied to the Senate Department for Mobility, Transport, Climate Protection and Environment. This marks a second, distinct data loss event connected to the broader intrusion, expanding the scope of the incident beyond what was previously disclosed.

While the full extent of the stolen data remains under review, the confirmation of further outflows suggests that the attackers had deeper access than initially understood. The state government has not indicated any willingness to open negotiations, reinforcing its public position against ransom payments.

• Affected entity: Berlin state administrative network
• Additional compromised data: Senate Department for Mobility, Transport, Climate Protection and Environment
• Incident timeline: Initial compromise in August; extortion attempt confirmed subsequently

Source: The Hacker News

Given Berlin’s refusal to pay, how is your organization balancing the risk of data leakage against the reputational and operational costs of holding the line on ransom demands?