Hacker leaks 281 GB of data from Germany's far-right AfD party

An unpatched website led to a massive leak of internal AfD party data, exposing sensitive communications and potentially revealing undisclosed party activities.

Germany's far-right AfD party has confirmed a significant data breach, with a hacker leaking approximately 281 GB of internal party data, including hundreds of thousands of emails. The breach reportedly occurred in September when the party's hosting provider was compromised, with the leaked archive containing messages as recent as September 12, 2026. The leaked data, containing over 421,000 emails and 100,000 files, was published on the Hexane.cc leak site, which features AI-generated summaries categorizing content like racism and antisemitism. The hacker claims the leak aims to expose the party's "degeneracy and hypocrisy" and has reportedly been contacted with a €100,000 offer to remove the data. The AfD party suggests that older, unused mailboxes were most affected, but the recency of some messages contradicts this claim. Initial reports suggest the hack may have resulted from an unpatched website, though this remains unverified.

The AfD's data leak highlights a common vulnerability in political organizations: the persistent use of outdated and unpatched systems. The fact that a hacker could access and exfiltrate such a large volume of data suggests a lapse in basic cybersecurity hygiene, potentially impacting not just the party's reputation but also the privacy of individuals whose information was contained within the stolen emails. The use of AI-generated summaries to categorize the leaked content further complicates the narrative, introducing potential inaccuracies while rapidly disseminating potentially sensitive information.

This incident underscores the growing sophistication of data breaches and the novel methods employed by attackers to weaponize stolen information. The offer of a bribe to remove the data and the subsequent publication of AI-summarized content represent evolving tactics in cyber warfare and political disruption. For political parties and organizations handling sensitive data, this event serves as a stark reminder of the critical need for continuous security audits, robust patching protocols, and secure data handling practices to prevent future compromises and maintain public trust.