Cyberattack cuts two Berlin ministries from state network, putting 50,000 welfare payments at risk

Administrative network severed

Berlin state authorities disconnected two senate departments from the central government network on 14 August 2026 after detecting an unauthorized intrusion into administrative IT infrastructure. The targeted bodies, the Senate Department for Urban Development, Building and Housing and the Senate Department for Mobility, Transport, Climate Action and the Environment, were cut off to prevent additional network damage. The isolation left both departments without internet access, external email systems, and remote working infrastructure. The Senate Chancellery confirmed the intrusion on 17 August 2026, stating that forensic examinations had revealed an incrimination of the state network. State police investigators from the Landeskriminalamt, Berlin public prosecutors, and the Federal Office for Information Security started joint investigations, while an emergency crisis team coordinated the operational response.

Due to the isolation of the Senate Department for Urban Development, Building and Housing from the Berlin state network, there are restrictions on citizens office services such as applying for housing benefits.

District services and welfare payments stalled

The separation of the central building administration cascaded directly into borough-level citizen offices that rely on unified software to process state benefits. District authorities in Pankow, Marzahn-Hellersdorf, and Friedrichshain-Kreuzberg confirmed that caseworkers could not access databases for housing benefits, education and participation subsidies, housing eligibility certificates, land registries, or misappropriation registers. The outage creates uncertainty for more than 50,000 households scheduled to receive housing benefit payments on 31 August 2026. While building department spokesperson Martin Pallgen maintained that internal emails and telephone lines remained functional, employees in the transport department told Tagesspiegel that staff members were practically unable to work.

We are able to work.

Election portal failure and security debate

The network outage coincided with technical failures on the public portal for ordering postal ballot papers. The online system, operated by the State Office for Citizens and Regulatory Affairs, became inaccessible on the evening of 17 August 2026, briefly recovered on 18 August 2026, and then experienced recurring error screens. The system failure occurred ahead of the 20 September 2026 elections for the Berlin state parliament and the twelve district assemblies. State Returning Officer Stephan Bröchler cut short his summer leave to monitor developments, though both election officials and the Senate Department for the Interior stated that no technical connection exists between the postal vote portal disruption and the senate department intrusion.

Disputed data loss and system security

Conflicting assessments emerged regarding whether attackers extracted data during the infiltration. Broadcaster RBB reported that perpetrators exfiltrated sensitive administrative records, an assertion that the Senate Chancellery contested as investigations proceeded. An internal source cited by Tagesspiegel indicated that data obtained by the attackers was limited to publicly available geoinformation, with specialists investigating whether the visible incident was deployed to distract from secondary intrusions. IT security specialist Manuel Atug criticized the administrative response and general municipal IT preparedness, stating that Berlin had maintained weak security measures and lacked dedicated public crisis communication channels.

At the moment it is a priority to analyze and evaluate the situation calmly.