German cyber security officials defend data breach response

Published January 6, 2019
The incident has shocked the establishment and prompted calls for security agencies to clarify whether any security deficiencies they were aware of had been exploited, and if they could have acted sooner to head off the breach. ─ File photo
The incident has shocked the establishment and prompted calls for security agencies to clarify whether any security deficiencies they were aware of had been exploited, and if they could have acted sooner to head off the breach. ─ File photo

BERLIN: Germany’s BSI cyber defence agency on Saturday defended its role in responding to a far-reaching data breach, saying it could not have connected individual cases it was aware of last year until the entire data release became public.

The government said on Friday that personal data and documents from hundreds of German politicians and public figures including Chancellor Angela Merkel had been published online, in what appeared to be one of Germany’s biggest data breaches.

The incident has shocked the establishment and prompted calls for security agencies to clarify whether any security deficiencies they were aware of had been exploited, and if they could have acted sooner to head off the breach.

The BSI said in a statement that it was contacted by a lawmaker early December about suspicious activity on their private email and social media accounts.

“Only by becoming aware of the release of the data sets via the Twitter account ‘G0d’ on Jan. 3, 2019, could the BSI in a further analysis on Jan. 4, 2019 connect this case and four other cases that the BSI became aware of during 2018,” it said. “At the beginning of December 2018, it was not foreseeable that there would be more cases.”

The BSI said on Friday all but one of the seven parties in the lower house had been affected. German media said that party was the right-wing Alternative for Germany (AfD).

Last year, lawmakers said a powerful cyber attack had breached the foreign ministry’s computer network.

Security officials have blamed most previous breaches of data security on a Russian hacking group, while the Kremlin has consistently denied involvement in such incidents.

After the latest data breach, Justice Minister Katarina Barley said she was considering stricter security requirements for software makers and internet platform operators.

“We are examining the extent to which stricter legal provisions are useful and necessary here,” she told weekly newspaper Welt am Sonntag, according to a pre-released article.

Authorities were investigating all possibilities, including espionage, one government source said on Friday, adding that it was unlikely any single person could have compiled the massive amounts of data that had been released.

Published in Dawn, January 6th, 2019

Opinion

Editorial

Rigging claims
Updated 04 May, 2024

Rigging claims

The PTI’s allegations are not new; most elections in Pakistan have been controversial, and it is almost a given that results will be challenged by the losing side.
Gaza’s wasteland
04 May, 2024

Gaza’s wasteland

SINCE the start of hostilities on Oct 7, Israel has put in ceaseless efforts to depopulate Gaza, and make the Strip...
Housing scams
04 May, 2024

Housing scams

THE story of illegal housing schemes in Punjab is the story of greed, corruption and plunder. Major players in these...
Under siege
Updated 03 May, 2024

Under siege

Whether through direct censorship, withholding advertising, harassment or violence, the press in Pakistan navigates a hazardous terrain.
Meddlesome ways
03 May, 2024

Meddlesome ways

AFTER this week’s proceedings in the so-called ‘meddling case’, it appears that the majority of judges...
Mass transit mess
03 May, 2024

Mass transit mess

THAT Karachi — one of the world’s largest megacities — does not have a mass transit system worth the name is ...