AfD Hosting Provider Breach Exposes 345,000 Email Accounts
A cyberattack on Alternita Dienstleistungs GmbH, the hosting provider for Germany's far-right AfD party, has resulted in the exposure of over 345,000 email accounts and a terabyte of sensitive data.
A significant cyberattack targeting the hosting provider for Germany's prominent far-right political party, Alternative for Germany (AfD), has led to the exposure of hundreds of thousands of confidential emails and attachments, alongside more than 345,000 unique email addresses. The scale of the breach was confirmed by Have I Been Pwned, following the AfD's official disclosure of the September incident last week. While the party initially downplayed the breach, stating "only a few email accounts were illegally copied," they later admitted a substantial volume of data was exfiltrated.
The compromised data was subsequently published on an "activist website," which utilized artificial intelligence to summarize email chains into searchable topics. This has reportedly led to the revelation of controversial statements attributed to party leaders, including opinions on sensitive racial discourse among colleagues. According to investigative journalist Lilith Wittmann, who cited conversations with the cybercriminals and party sources, the attack commenced on September 9th. The initial vector was reportedly a poorly secured WordPress site, which granted attackers persistent access to the servers operated by the AfD-owned hosting provider, Alternita Dienstleistungs GmbH. Over a terabyte of data was allegedly exfiltrated, though official sources have not yet verified the hackers' detailed account of the intrusion.
The AfD has stated that owners of the affected email accounts have been notified and that the incident has been reported to security authorities. In a statement, the party expressed deep concern, labeling the digital attack as illegal, criminal, and an assault on the German party system and democracy. They specifically criticized the use of AI for summarizing the stolen documents, arguing that the rudimentary analysis focused on keywords rather than context, and that the alleged scandals published so far lack scrutiny. This sentiment has been echoed by various commentators on social media.
Among the AI-generated summaries are alleged discussions related to Holocaust denial, racist and antisemitic remarks, and forged documents. However, the AfD maintains that these AI summaries are untrustworthy. Separately, Der Spiegel reported that party leader Alice Weidel may have been aware of illegal donations related to the 2017 federal elections significantly earlier than previously claimed. The party has not directly commented on the veracity of the raw email files available for download via torrent, nor have they responded to specific requests for comment regarding the accuracy of the raw data or subsequent reporting.
This incident highlights the pervasive risks associated with third-party data handling, especially for political organizations. The compromise of a hosting provider, even one owned by the party itself, demonstrates a critical failure in securing the digital infrastructure necessary for sensitive communications. The subsequent use of AI to analyze and disseminate the stolen information adds a new layer of complexity and potential for disinformation.
The AfD's response, emphasizing the untrustworthiness of AI summaries while not directly refuting the raw data, suggests a strategy of damage control and casting doubt on the integrity of the leaked information. The ongoing investigation by security authorities will be crucial in determining the full extent of the breach and the methods employed by the attackers.
This breach serves as a stark reminder of the vulnerabilities inherent in digital communication and data storage. The exfiltration of such a large volume of sensitive emails and the subsequent AI-driven analysis underscore the evolving tactics of cybercriminals and the potential for sophisticated attacks to target political entities and their infrastructure.