Chinese state-linked hackers stole CDU emails, including those of leader Merz, in 2024 attack

In spring 2024 a major cyberattack targeted Germany's CDU party headquarters via a software vulnerability (CVE-2024-24919), allowing Chinese state-sponsored hackers to access internal systems undetected for weeks. Among stolen data were the emails and calendar of CDU chairman and chancellor candidate Friedrich Merz. German security agencies BSI and BfV confirmed the serious espionage and suspect data may have been shared with Russia to influence the upcoming federal election on February 23, 2025. Authorities warn of possible 'hack and leak' operations that could publish sensitive information to destabilize German politics. The incident follows a pattern of cyberattacks against German political parties over recent years, attributed mainly to Russian intelligence services but increasingly involving Chinese actors working jointly with Russia. The federal government has formed a new taskforce (ZEAM) to detect foreign information manipulation but it is still in early stages as the election approaches.