Berlin's mayor has publicly stated that the city is being blackmailed following a cyberattack that took place roughly two weeks ago, during which data was stolen from city systems. For the hundreds of thousands of expats, immigrants, and foreign nationals who have submitted personal information to Berlin's public administration — including the Ausländerbehörde, registration offices, and other municipal services — this is a development worth understanding. While the full scope of the incident is still emerging, knowing what happened and what to watch for is an important first step.
According to reporting by The Local, Berlin's mayor confirmed on Friday that attackers had stolen data during a cyberattack approximately two weeks prior. The mayor used the word "blackmailed" to describe the city's situation, suggesting the attackers are leveraging the stolen data in some way.
The specific nature of the data that was taken, which city systems were affected, and how many individuals are involved have not been detailed in the available reporting. Berlin's city administration manages an enormous volume of personal data, covering residents, businesses, and public services across the capital.
If you live in Berlin and have interacted with the city's public services — including submitting an Anmeldung, applying for or renewing an Aufenthaltstitel, or registering with the Jobcenter — your personal data may be held in municipal systems. A data theft of this kind raises legitimate questions about what information could have been exposed.
It is important not to panic. The city's authorities and cybersecurity teams will be working to assess and contain the damage. However, it is sensible to take some precautionary steps in the meantime.
While official guidance from Berlin's authorities is the most authoritative source of information, there are some general steps any resident can take when a public data breach is reported:
The available reporting does not specify exactly which city systems were breached. The Ausländerbehörde holds sensitive personal and immigration data for foreign nationals in Berlin. Until official guidance clarifies which systems were affected, it is reasonable to stay alert and follow any updates from the city. If you have specific concerns about your case, contact your Ausländerbehörde directly for guidance.
Cyberattacks on public administration systems can sometimes cause delays or disruptions to services. If you have a pending appointment or application with a Berlin city office, it is worth checking whether services are operating normally and confirming your appointment is still scheduled. Contact the relevant office directly using official contact details found on Berlin's official government website.
Stay calm but stay informed. The situation is still developing, and Berlin's authorities are the primary source of accurate, up-to-date guidance. Keep an eye on official communications from the city, be cautious about unsolicited contact claiming to be from public bodies, and monitor your personal accounts for anything unusual. If you believe your data has been misused in connection with this incident, contact the relevant city authority for advice.
Source: The Local
Want news like this in your inbox?
The most relevant news for expats in Germany, no noise.
Monday's Germany news includes Chancellor Merz warning an AfD government would hurt Saxony-Anhalt's economy, a record-hot summer, and German citizens missing in Nepal floods.
September brings a national warning day with sirens and alert app tests, a new product guarantee label, and simplified tax advisory rules in Germany.
Powerful storms have caused major disruption in southern Germany, uprooting trees, damaging homes, and closing rail lines. Switzerland and northern Italy were also affected.
