When it comes to IT security, Berlin's Governing Mayor Kai Wegner sees an urgent need for action. He is convinced that the Berlin administration's data network must quickly be better protected against cyber attacks. “We will not wait until a new coalition is formed, but we will make all human and financial resources available,” said the CDU politician after the most recent Senate meeting with a view to the House of Representatives election on September 20th.
“We are in the process of hardening the state network. We have gained new insights from the current cyber attack.” One goal must be greater centralization in the area of IT for the Berlin administration, said Wegner. “We live in a different threat situation than perhaps three, four or five years ago. We simply have to see how we can make our networks even more secure.”
No evidence of further hacker activity in the data network
Regarding the hacker attack on the Berlin administration that became known in mid-August, Wegner said that the top priority was to stop the attack. “And we can say today, at least according to the current situation, that we have succeeded,” said the Governing Mayor.
At this point in time there is no evidence that the state network has yet been infiltrated. However, the crisis team that was set up after the hacker attack became known to look after the security of the state network is continuing to work.
Cyber attacks now occur every day. “And so far we have always managed to fend off these attacks,” said Wegner. “And now someone has gotten through, very, very professional and with a very, very high level of criminal energy.”
The hacker attack on parts of the Berlin administration's data network became known on August 14th. The two Senate departments for construction and transport were affected. The hacker group Rhysida blackmailed the country and demanded 30 Bitcoin, the equivalent of around two million euros. The Senate did not pay, and the cybercriminals published at least 1.2 million records after their ultimatum expired.
Senate wants to offer advice for those affected
The Senate is planning a contact point for citizens and companies that may be affected by the consequences of the cyber attack, as Wegner announced. The cybercriminals have also captured and published personal data that other criminals could use, for example, for identity theft or other forms of fraud.
According to Digital State Secretary Florian Hauer, it is about advice and help for people who believe that their data could have been leaked. Details of the contact point are still open; a central email contact is initially planned. A telephone hotline is also conceivable. The goal is to offer this as quickly as possible.
According to the State Secretary, it cannot be ruled out that the cyber attack also leaked data from Berliners and companies that were in contact with both Senate administrations - for example, to apply for a building permit. The process of identifying and informing them in order to provide them with assistance is very difficult due to the enormous amounts of data and can take weeks.
Contact point should give tips
The planned contact point is, among other things, about giving concerned people general information about what they can do and what they need to pay attention to. An external law firm and the state data protection officer provide advisory support.
Wegner said it was the job of the public prosecutor's office, state and federal criminal investigation office to track down the criminals who were behind the cyber attack. “Unfortunately, it is not yet possible to say when the investigation will be completed,” said the CDU politician. “But I can tell you that the investigation is in full swing.” The State Criminal Police Office has set up a special organizational structure for this purpose.
At the same time, we continue to analyze which data was stolen in the cyber attack. “We are in the process of examining all systems, what exactly flowed out, who was on it and where,” he said. State Secretary Hauer pointed out that checking the data using forensic software would still take a long time.
