CASE DOSSIER fugitive

U.S. & International Action: Dmitry Badin (German Bundestag Hack)

Docket: German Federal Prosecutor Warrant / U.S. D.D.C. 1:18-cr-00215 Court: Federal Court of Justice (Germany) & U.S. District Court for the District of Columbia Opened: 2020-05-05 Sector: Legislative Bodies, National Government

Key Facts

Status

FUGITIVE

Legal disposition

Loss Amount

$15.0 million

Forced the total decommissioning and complete rebuild of the Bundestag computer network.

Techniques

Verified mappings

Defendants

Named in charges

Legal Status: FUGITIVE in Federal Court of Justice (Germany) & U.S. District Court for the District of Columbia.
Primary Target Sector: Legislative Bodies, National Government.
Documented Financial Loss: $15.0 million.
1 verified MITRE ATT&CK techniques substantiated with verbatim court excerpts.

Export structured case data and MITRE ATT&CK Navigator layer:

Download Navigator Layer (JSON) Case Data (JSON)

Case Summary

Russian GRU military officer charged with the 2015 cyber intrusion into the German Federal Parliament (Bundestag), which compromised parliamentary IT infrastructure and exfiltrated thousands of emails from Chancellor Angela Merkel's office.

Procedural & Incident Timeline

2020-10-22 sanction

European Union imposes sanctions against Dmitry Badin and GRU Unit 26165.

Named Defendants & Operatives

Defendant	Nationality	Status	Prison Term	Restitution	Notes
Dmitriy Sergeyevich Badin	Russian Federation	fugitive	Pending	None	GRU cyber operator indicted in D.D.C. and subject to German federal arrest warrant for the Bundestag intrusion.

Substantiated MITRE ATT&CK Techniques

Technique ID	Technique Name & Tactic	Primary Source Evidence Excerpt	Locator	Verification
T1566.001	Spearphishing Attachment Initial Access	"Attackers sent spearphishing emails with malicious attachments disguised as United Nations newsletters to German members of parliament."	BKA Investigation Summary	reviewed

CISA Cybersecurity Advisories

AA24-057A: Understanding and Mitigating Russian State-Sponsored Cyber Threats to U.S. Critical Infrastructure

Cite & Embed This Case Record

Public Domain / CC0

Bluebook Legal Citation:

Cyberattack Case Library, U.S. & International Action: Dmitry Badin (German Bundestag Hack), No. German Federal Prosecutor Warrant / U.S. D.D.C. 1:18-cr-00215 (Federal Court of Justice (Germany) & U.S. District Court for the District of Columbia 2020), https://cyberattackcaselibrary.pages.dev/cases/us-v-badin-german-bundestag-apt28/

Embeddable Incident Card (HTML):