Germany blames China for major 2021 cyber attack on cartography agency

Germany has accused China of orchestrating a significant cyber attack in 2021 on its Federal Office for Cartography and Geodesy (BKG), potentially exposing sensitive data crucial for protecting national infrastructure. German Interior Minister Nancy Faeser condemned the Chinese state actors responsible, marking a serious diplomatic rift between Berlin and Beijing.

 

Following a three-year investigation by German security authorities, the government identified the malware that compromised BKG systems as being linked to Chinese hacking groups APT15 and APT31, both reportedly under the control of China’s Ministry of State Security. The German Foreign Ministry has summoned the Chinese ambassador in Berlin to issue a formal complaint.

 

The cyber attack on the BKG, which gathers precision mapping data essential to various state and private operations, highlighted significant vulnerabilities in Germany’s digital infrastructure. “This serious cyber attack on a federal authority shows how great the danger posed by Chinese cyber attacks and espionage is,” Faeser stated. “These cyber attacks threaten the digital sovereignty of Germany and Europe.”

 

In response to the attack, German security services have purged the BKG’s systems of the malware, ensuring the integrity of their databases. The incident underscores increasing concerns within Germany about Chinese cyber espionage.

 

The revelation follows Germany’s decision to remove Chinese technology from its 5G networks, reflecting broader security concerns. Despite Chancellor Olaf Scholz’s preference for maintaining trade relations with China, tensions have escalated over Beijing’s authoritarian practices and security risks.

 

Germany’s Federal Office for the Protection of the Constitution (BfV) recently warned that Chinese cyber attacks targeting German interests will likely intensify. The BfV’s annual report indicated that China is pursuing an aggressive cyber strategy to steal valuable corporate intellectual property and exploit IT service providers as gateways for sophisticated attacks.

 

In a statement, Faeser emphasized Germany’s bolstered cyber defenses and called on China to cease such cyber activities, which threaten the digital sovereignty of Germany and Europe. The German government’s formal complaint to the Chinese ambassador marks the first diplomatic action since the 1989 Tiananmen Square crackdown.

 

As tensions rise, the arrest of four individuals in April, including an aide to a German lawmaker, on suspicion of spying for China has further strained relations. In early 2024, several Western countries, including the United States, United Kingdom, Australia, Canada, and New Zealand, criticized China for its state-sponsored hacking activities.