Berlin authorities have refused to pay a 30 Bitcoin ransom worth around 2 million euros after a cyberattack by the Rhysida group disrupted two state agencies' networks. The attackers claimed to have obtained 5.79 terabytes of data, including government records, personnel files and financial information. Officials isolated the networks on August 14, halting housing benefits applications for several days, and later acknowledged that non-public data may have been affected. Mayor Kai Wegner confirmed the demand landed Thursday evening and stated Berlin will not be blackmailed. The dark web leak site shows a countdown to a public data auction, with the group threatening GDPR penalties within seven days. Data extraction is believed to have occurred between August 7 and 12. Election infrastructure remains unaffected ahead of the September 20 state election. The case highlights the increasing use of regulatory threats like GDPR by ransomware groups to pressure public institutions.