Berlin says it won’t pay ransom after hackers steal government data
Berlin has refused to pay a ransom demand following a cyberattack discovered in mid-August that resulted in the theft of government data, according to Governing Mayor Kai Wegner. The city's decision to reject the extortion demand represents a firm stance against capitulating to cybercriminals despite the breach of sensitive municipal information.
McKesson, a major pharmaceutical and healthcare technology company, has warned of service degradation following a cyberattack and notified regulators of the incident. The company is still in early investigation stages regarding a cybersecurity compromise involving an unidentified third-party application. The ongoing impact to McKesson's services underscores the operational risks posed by vulnerabilities in third-party software within critical healthcare infrastructure.
Aurora ransomware operators have been leveraging Cursor, an AI-powered coding assistant, to facilitate network intrusions against multiple targets, as revealed by CloudSEK and Gambit Security through analysis of exposed infrastructure. The Russian-speaking cybercrime group's use of AI tools represents an emerging tactic in ransomware campaigns, demonstrating how legitimate development platforms are being repurposed for malicious objectives.
The Rhysida ransomware group has claimed responsibility for stealing over 5TB of data from Berlin, including personal information and credentials. Berlin has decided against paying the extortion demands made by the threat actors.