{
  "id": "4d08466f-874f-4a1b-afe3-8d02f469eedb",
  "url": "https://tagesschau.de/inland/innenpolitik/ermittlungen-hackerangriff-bundesamt-kartographie-100.html",
  "source": "extension",
  "status": "approved",
  "category": "Cyber & Information Warfare",
  "subcategory": "Cyber Attacks",
  "incident_type": "Hacking, malware, ransomware",
  "country": "Germany",
  "source_reliability": "A",
  "info_credibility": "3",
  "tags": [
    "China",
    "Germany",
    "cyberattacks",
    "offensive cyber operations",
    "Federal Agency for Cartography and Geodesy",
    "diplomatic protest",
    "concealment networks",
    "state-sponsored hackers"
  ],
  "nodes": [],
  "countries": [
    "Germany"
  ],
  "where_text": "Cyberspace",
  "headline": "Berlin attributes 2021 cyberattack on Federal Agency to China",
  "description": "The German Federal Government has confirmed that a significant cyber intrusion in 2021 into the Federal Agency for Cartography and Geodesy (BKG) was conducted by state-directed Chinese cyber actors for espionage. This attribution followed a detailed technical analysis conducted primarily by domestic intelligence agencies, leading to the unprecedented diplomatic measure of summoning the Chinese ambassador to Berlin—the first since the 1989 Tiananmen Square protests. The BKG provides crucial geospatial data for critical infrastructure sectors such as energy, water supply, and transport. The attackers employed so-called concealment networks, exploiting devices in private homes and companies to obscure their activities. German security agencies have consistently warned of intensifying espionage and influence operations by China aimed at bolstering its industrial and geopolitical ambitions through extensive knowledge transfers. Attacks in the previous year targeted enterprises, government bodies, private persons, and political institutions, particularly seeking information related to political decision-making and German-European foreign policy. These are often staged via IT service providers linked to political entities, used as gateways for further operations.",
  "summary_short": "The German government has officially blamed China for a serious 2021 cyberattack on the Federal Agency for Cartography and Geodesy, marking the first diplomatic summons of the Chinese ambassador since 1989.",
  "summary_extended": "In 2021, a severe cyberattack targeted Germany's Federal Agency for Cartography and Geodesy (BKG), infiltrating its network for espionage purposes. Following a thorough technical investigation, the German government has publicly attributed the attack to state-sponsored Chinese hackers. The Chinese ambassador was summoned, marking Berlin's first such diplomatic move against China since 1989. The BKG plays a critical role supplying geospatial data essential to critical infrastructure sectors including energy, water, and transport. Attackers utilized concealment networks leveraging devices in private homes and enterprises to mask their traces. German authorities, led by the Federal Office for the Protection of the Constitution, warned that China pursues an offensive cyber strategy aiming to acquire knowledge supporting its industry and geopolitical objectives. Recent years saw targeted assaults by Chinese state-controlled actors against companies, government institutions, and individuals to gather information on political decision-making and foreign policy positions. This incident underscores enduring concerns about Chinese cyber espionage affecting Germany's national security and political landscape.",
  "actor_primary": "state-controlled Chinese cyber actors",
  "target_primary": null,
  "location_text": "Federal Agency for Cartography and Geodesy, Frankfurt am Main",
  "location_region": null,
  "location_coordinates_lat": 50.1109,
  "location_coordinates_lon": 8.6821,
  "location_precision": "Approximate",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The article explicitly attributes a 2021 cyber intrusion targeting a German federal agency to state-directed Chinese hackers, detailing technical attribution, diplomatic response, and espionage motives, clearly indicating hostile cyber aggression.",
  "event_time_utc": "2021-01-01T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "pm24h",
  "created_at": "2026-04-28T14:51:00.330Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "approximate",
  "time_precision_band": "within_24h",
  "severity_band": "significant",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}

{
  "id": "4d08466f-874f-4a1b-afe3-8d02f469eedb",
  "url": "https://tagesschau.de/inland/innenpolitik/ermittlungen-hackerangriff-bundesamt-kartographie-100.html",
  "source": "extension",
  "status": "approved",
  "category": "Cyber & Information Warfare",
  "subcategory": "Cyber Attacks",
  "incident_type": "Hacking, malware, ransomware",
  "country": "Germany",
  "source_reliability": "A",
  "info_credibility": "3",
  "tags": [
    "China",
    "Germany",
    "cyberattacks",
    "offensive cyber operations",
    "Federal Agency for Cartography and Geodesy",
    "diplomatic protest",
    "concealment networks",
    "state-sponsored hackers"
  ],
  "nodes": [],
  "countries": [
    "Germany"
  ],
  "where_text": "Cyberspace",
  "headline": "Berlin attributes 2021 cyberattack on Federal Agency to China",
  "description": "The German Federal Government has confirmed that a significant cyber intrusion in 2021 into the Federal Agency for Cartography and Geodesy (BKG) was conducted by state-directed Chinese cyber actors for espionage. This attribution followed a detailed technical analysis conducted primarily by domestic intelligence agencies, leading to the unprecedented diplomatic measure of summoning the Chinese ambassador to Berlin—the first since the 1989 Tiananmen Square protests. The BKG provides crucial geospatial data for critical infrastructure sectors such as energy, water supply, and transport. The attackers employed so-called concealment networks, exploiting devices in private homes and companies to obscure their activities. German security agencies have consistently warned of intensifying espionage and influence operations by China aimed at bolstering its industrial and geopolitical ambitions through extensive knowledge transfers. Attacks in the previous year targeted enterprises, government bodies, private persons, and political institutions, particularly seeking information related to political decision-making and German-European foreign policy. These are often staged via IT service providers linked to political entities, used as gateways for further operations.",
  "summary_short": "The German government has officially blamed China for a serious 2021 cyberattack on the Federal Agency for Cartography and Geodesy, marking the first diplomatic summons of the Chinese ambassador since 1989.",
  "summary_extended": "In 2021, a severe cyberattack targeted Germany's Federal Agency for Cartography and Geodesy (BKG), infiltrating its network for espionage purposes. Following a thorough technical investigation, the German government has publicly attributed the attack to state-sponsored Chinese hackers. The Chinese ambassador was summoned, marking Berlin's first such diplomatic move against China since 1989. The BKG plays a critical role supplying geospatial data essential to critical infrastructure sectors including energy, water, and transport. Attackers utilized concealment networks leveraging devices in private homes and enterprises to mask their traces. German authorities, led by the Federal Office for the Protection of the Constitution, warned that China pursues an offensive cyber strategy aiming to acquire knowledge supporting its industry and geopolitical objectives. Recent years saw targeted assaults by Chinese state-controlled actors against companies, government institutions, and individuals to gather information on political decision-making and foreign policy positions. This incident underscores enduring concerns about Chinese cyber espionage affecting Germany's national security and political landscape.",
  "actor_primary": "state-controlled Chinese cyber actors",
  "target_primary": null,
  "location_text": "Federal Agency for Cartography and Geodesy, Frankfurt am Main",
  "location_region": null,
  "location_coordinates_lat": 50.1109,
  "location_coordinates_lon": 8.6821,
  "location_precision": "Approximate",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The article explicitly attributes a 2021 cyber intrusion targeting a German federal agency to state-directed Chinese hackers, detailing technical attribution, diplomatic response, and espionage motives, clearly indicating hostile cyber aggression.",
  "event_time_utc": "2021-01-01T00:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "pm24h",
  "created_at": "2026-04-28T14:51:00.330Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "approximate",
  "time_precision_band": "within_24h",
  "severity_band": "significant",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}