Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybercrime

Massive Data Leak Targets German Officials Including Merkel

Hundreds of German politicians, including Chancellor Angela Merkel, have fallen victim to a massive online leak of private data, the government said Friday.

“Personal data and documents belonging to hundreds of politicians and public figures were published on the internet,” government spokeswoman Martina Fietz told reporters.

Hundreds of German politicians, including Chancellor Angela Merkel, have fallen victim to a massive online leak of private data, the government said Friday.

“Personal data and documents belonging to hundreds of politicians and public figures were published on the internet,” government spokeswoman Martina Fietz told reporters.

“The government is taking this incident very seriously.”

She said the political officials included members of the Bundestag lower house of parliament, the European Parliament as well as regional and local assemblies.

Deputies from all parties represented in the Bundestag were affected, she added.

But Fietz said that a preliminary investigation indicated that “no sensitive information or data” from Merkel’s office had been leaked.

The stolen data, which comprised personal addresses, mobile phone numbers, letters, invoices and copies of identity documents, was published online via Twitter in December but inexplicably only came to light this week.

Beyond politicians, who also included President Frank-Walter Steinmeier, celebrities and journalists were also targeted.

Advertisement. Scroll to continue reading.

The daily Bild and public broadcaster RBB first reported the leak.

Bild said the theft of the data continued until the end of October but it was not clear when it started.

“At first glance it does not seem that politically sensitive material was included,” RBB said.

– ‘Satire and irony’ –

“However the damage is likely to be massive given the volume of personal data published.”

Given the vast range of data hoovered up, RBB said it seemed unlikely that it was taken from a single source.

Parliamentary group leaders were notified of the attack late Thursday and the Federal Office for Information Security (BSI) and the domestic intelligence service said they were investigating.

“According to our current information, government networks have not been targeted,” BSI tweeted.

The Twitter account @_0rbit published the links daily in the style of an advent calendar, with each entry representing a “door”, behind which was a link to new information.

The account, calling itself G0d, was opened in mid-2017 and purportedly has more then 18,000 followers.

It described its activities as “security researching”, “artist” and “satire and irony” and said it was based in Hamburg.

The domestic intelligence service, the Office for the Protection of the Constitution, reported repeated cyberattacks last year against MPs, the military and several embassies allegedly carried out by Russian cyber espionage group “Snake”.

Also known as “Turla” or “Uruburos”, the group, which targets state departments and embassies worldwide, is believed to have links to Russian intelligence.

Last March, computer networks belonging to the German government came under sustained attack and data from foreign ministry staff were stolen.

The Russian government at the time denied that Russian hackers were involved.

Written By

AFP 2023

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Discover strategies for vendor selection, integration to minimize redundancies, and maximizing ROI from your cybersecurity investments. Gain actionable insights to ensure your stack is ready for tomorrow’s challenges.

Register

Dive into critical topics such as incident response, threat intelligence, and attack surface management. Learn how to align cyber resilience plans with business objectives to reduce potential impacts and secure your organization in an ever-evolving threat landscape.

Register

People on the Move

The US arm of networking giant TP-Link has appointed Adam Robertson as Director of Information and Security.

Cyber exposure management firm Armis has promoted Alex Mosher to President.

Software giant Atlassian has named David Cross as its new CISO.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.