EudorIACyber Intelligence
Operational monitoring Newsletter IT EN
← Back to intelligence
Ransomware

Segnalazione ransomware: Berlin, Germany

Unverified report
Unverified report. It does not confirm an incident and must be verified with independent sources.
EudorIA operational summary

What it means

Priority 90/100

Una fonte OSINT pubblica associa Berlin, Germany al gruppo rhysida. La notizia non e stata verificata in modo indipendente da EudorIA.

Why it matters

Il segnale puo aiutare il monitoraggio del rischio di filiera, ma non deve essere trattato come conferma di compromissione.

AudienceSOCCISOManagement
Information centre

Translation in progress

ransomware.live

The official content is available in the original language. The Italian version will be published once automated checks are complete.

Text acquired from the source

Indice OSINT pubblico: Berlin, Germany viene associata al gruppo rhysida. La segnalazione non e stata verificata da EudorIA e non equivale alla conferma di un incidente.

Evidenza della rivendicazione

Evidenza acquisita dal collector isolato. La rivendicazione richiede verifica indipendente e non prova da sola una compromissione.

Descrizione pubblicata dalla fonte

Recently, there are a lot of people who want to download files and therefore the download may be slower than usual. Here you can download it in the archives. Total capacity 5.79 TB Archive scale: ~1.44 million files scanned; by category - Maps/Geo 124,823, Legal/complaints 77,939, Financial 55,553, Contracts 46,522, HR 27,299, Government supervisory 13,142, Confidential 11,777, Infrastructure 8,110, Passwords 5,941, Health 2,738, Contacts 2,287. PII leak: 16,389 e-mails, 11,963 phone numbers, 12,076 individuals, 148 IBANs. Credentials in plaintext: Geb�udeAtlas, the ePayment PAYONE payment database, personal 'password safes' (danz, kramell - Z_ADMIN database accounts, franssen), leadership credentials. Disciplinary proceedings: the ANDERSON case (432 files, 2025-2026, lawsuit at VG Berlin administrative court), the politically motivated misconduct case involving the LKA Staatsschutz (state security police), the forestry cases BLAUTH/M�LLER/FIELICKE. State secrets: Bundesrat committee protocols with declassification correspondence, Geheimschutz (classified-material handling) data. Passports/IDs (recent, from personnel files and GI-Vertraulich). KRITIS: vulnerability analyses of Berlin's water supply. Mass personal data: Personalakten (personnel files) >5,000, Convotis payroll, OWi (administrative-offence) files >5,000, Postbuch SQL dumps 2020-2026, PST archives, leadership private data (IBANs, ID cards, Behrendt's bank card). NDA: 3,226 documents Legal violation map (GDPR Art. 32/9/33, VSA/StGB upon VS classification confirmation, BSIG/KRITIS) Documents (part 1) Documents (p
Cattura della pagina onion osservata
Cattura conservata come evidenza tecnica · SHA-512 c77862a5bbb659362ca7254499e21c5f76bfde49716cbaa49365c6970346176146ca51434a8fe63c45098e4e8fd576aefc58e2c0c89951c9d7f59c418e938933
Evidenza acquisita il
2026-09-21T12:57:17.173156+00:00
Direct access
No

Questa immagine documenta la pagina alla data di acquisizione; non certifica il suo contenuto alla data della segnalazione storica.

Source
ransomware.live public index
Publishing entity
ransomware.live
Entity type
public index
Area
Global · DE
Original language
en · translation in preparation
Publication
28/08/2026 16:29
Classification
reported
Named entity
Berlin, Germany
Group attributed by the source
rhysida
Stated country
DE

Action indicated by the source

Verificare con fonti indipendenti prima di qualunque decisione operativa o comunicazione al cliente.

Open the original source