# Cyberattacks on German public institutions > Live situation record from CLSTR: https://clstr.news/situations/cyberattacks-on-german-public-institutions > Updated: 2026-09-09T04:24:42.000Z. Sources: 2. Developments: 2. In August 2026, several German institutions were targeted by cyberattacks. The Brandenburg Memorial Sites Foundation reported a ransomware attack that disabled the IT systems of its headquarters and seven memorial sites, including Sachsenhausen and Ravensbrück. Foundation Director Axel Drecoll described the incident as a “severe setback,” noting that attackers likely encrypted and downloaded data. Shortly after, the Rhysida ransomware group targeted the Berlin administration. Following a phishing attack, the group demanded a ransom of 30 bitcoins, which Mayor Kai Wegner refused, stating the city “will not be extorted.” In retaliation, the hackers released approximately 1.4 million stolen files on the dark web. The leaked data includes personal files, payroll records, identity documents, and sensitive information regarding critical infrastructure and CBRN planning. While the breach raised significant concerns regarding identity theft and infrastructure security, electoral authorities confirmed that upcoming elections would not be affected. ## Timeline ### 2026-09-09: Berlin administration suffers massive data breach by Rhysida ransomware group The Rhysida ransomware group leaked 1.4 million files from the Berlin administration after the city refused a two-million-euro ransom. Stolen data includes personal records and critical infrastructure details. 2 sources. https://clstr.news/cluster/berlin-administration-suffers-massive-data-breach-by-rhysida-ransomware-group ### 2026-08-11: Brandenburg Memorial Sites Foundation hit by ransomware attack A ransomware attack has disabled the IT systems of the Brandenburg Memorial Sites Foundation in Germany, with fears that sensitive data was stolen by professional cybercriminals. 2 sources. https://clstr.news/cluster/brandenburg-memorial-sites-foundation-hit-by-ransomware-attack --- Cite as: Cyberattacks on German public institutions. CLSTR, https://clstr.news/situations/cyberattacks-on-german-public-institutions