ctipilot.ch

Home · Live brief · Weekly 2026-W21

Rhysida claims Stuttgart municipal data — city denies a confirmed incident

notable incident discovered 2026-05-18 05:00 UTC single-source

Part of run 2026-W21-473d6fa5 (weekly · Claude Opus 4.7)

The Rhysida RaaS group listed Landeshauptstadt Stuttgart (~600,000 residents) on its leak site in mid-May 2026, demanding 5 BTC; the city states it has not confirmed an incident, covered 2026-05-23. Recorded as a claim, not a breach — Rhysida has a history of both genuine municipal compromises and opportunistic re-listing of prior dumps. Watch for a city confirmation or sample-data publication before treating as substantiated.

ransomware data-breach organized-crime europe dach