--- title: The Door Nobody Remembered description: On 18 August 2026 Berlin took two state departments offline, through a server nobody had migrated. What the gap between IT strategy and legacy systems costs. image: https://www.protagx.com/hubfs/AI-Generated%20Media/Images/Server%20Room%20in%20Overgrown%20Berlin%20Building%20with%20Open%20Door%20and%20Light.png --- [Skip to content](https://www.protagx.com/en/ddd/the-door-nobody-remembered#main-content) - [English](https://www.protagx.com/en/ddd/the-door-nobody-remembered) - [Deutsch](https://www.protagx.com/de/ddd/die-tür-an-die-niemand-mehr-dachte) English This is a search field with an auto-suggest feature attached. - There are no suggestions because the search field is empty. [![protagx-logo (1024 × 300 px)](https://www.protagx.com/hubfs/logos/protagx-logo%20(1024%20%C3%97%20300%20px).svg "protagx-logo (1024 × 300 px)")](https://protagx.com?hsLang=en) - Product - [protagx for Hubspot, Salesforce & Co](https://www.protagx.com/en/crm) - [protagx New Customer Engine](https://www.protagx.com/en/your-new-business-engine) - [protagx Digital Ads Power](https://www.protagx.com/en/crm-service-ad-conversion-machine) - [protagx Day One Setup](https://www.protagx.com/en/crm-setup-services) - Why protagx? - [Case: Data Integration](https://www.protagx.com/en/data-integration-services) - [Demystifying the Data Forest](https://www.protagx.com/en/ddd/revolutionizing-healthcare-through-data-mesh-framework) - [Embracing Modernization in Clinical Trials](https://www.protagx.com/en/ddd/embracing-modernization-in-clinical-trials) - [Become a Partner](https://www.protagx.com/en/lets-explore-partnership-opportunities) - [DDD Blog](https://www.protagx.com/en/ddd) - [Data Diver's Dialogs](https://www.protagx.com/en/ddd) - Company - [About](https://www.protagx.com/en/about-protagx) - [Support](https://www.protagx.com/en/support) - [My tickets](https://portal.protagx.com/my-tickets) - Ressources - [Glossary](https://www.protagx.com/en/glossary-100-essential-concepts-technical-terms-methods-and-abbreviations) - [Webinars](https://www.protagx.com/en/online-course-lineup-for-protagx) - [The Guides](https://www.protagx.com/en/guidelines) - [Client Projects](https://www.protagx.com/en/references) - Ebooks (demnächst) - [Contact](https://www.protagx.com/en/contact) - [Support](https://www.protagx.com/en/support?hsLang=en) - [Book a Meeting](https://www.protagx.com/en/consultation?hsLang=en) - Search - [governance](https://www.protagx.com/en/ddd/tag/governance), - [Cybersecurity](https://www.protagx.com/en/ddd/tag/cybersecurity), - [Digitalisation](https://www.protagx.com/en/ddd/tag/digitalisation), - [Public Administration](https://www.protagx.com/en/ddd/tag/public-administration), - [Berlin](https://www.protagx.com/en/ddd/tag/berlin), - [Shadow IT](https://www.protagx.com/en/ddd/tag/shadow-it) # The Door Nobody Remembered ![The door nobody remembered](https://www.protagx.com/hubfs/AI-Generated%20Media/Images/Server%20Room%20in%20Overgrown%20Berlin%20Building%20with%20Open%20Door%20and%20Light.png) - August 19, 2026 ![Christian Schappeit](https://app.hubspot.com/settings/avatar/25b53a713bed514f3afd959a888660b9) [Christian Schappeit](https://www.protagx.com/en/ddd/author/christian-schappeit) *Data Divers Dialogs* *At 10:12 on 18 August, Berlin took two of its state departments offline. More than 50,000 households worried about their housing benefit. Only "freely accessible open data" had leaked, officials said. The way in was a server nobody had migrated, and the gap between a strategy for 2035 and an IT programme from 2018.* The announcement came on a Tuesday morning, timed to the minute: 18 August 2026, 10:12. The Berlin Senate administration reported that two of its departments had been hit by a cyberattack: Urban Development, Building and Housing, and Mobility, Transport, Climate Protection and the Environment. By then both had already been disconnected from the state network. No external email, no working from home, everyone back to the office. One employee gave *Tagesspiegel* the sentence that stays with you: *"We are practically unable to work."* The administration did what administrations do in such moments: it reassured. As far as anyone knew, only "freely accessible open data" had leaked. Personal data? Unclear. Scale? No further details, "for investigative reasons". It is worth setting that reassurance next to the measures for a moment. If only publicly accessible data was affected, why take two entire departments off the network, cut email and order thousands of staff back into the office? Either it was harmless or it was serious. Both at once does not make a press release. It makes a contradiction. And while the forensic teams searched, the concrete things stalled in the background. Housing benefit for more than 50,000 households was at risk. So was the education and participation package, and even online applications for postal voting. For a few days, the city that markets itself as an innovation hub could not reliably pay money to its citizens. ## The Door Was a Server Nobody Had Migrated What the authority withheld for investigative reasons, the IT trade press reconstructed in the days that followed. According to those reports, the way in did not lead through the new, hardened central infrastructure. It led through legacy IT that had never been migrated there. Since 2018 Berlin has run a programme with the hopeful name *OneIT@Berlin*. The idea: consolidate the scattered IT of the city's authorities in one central service provider, the ITDZ. Thousands of workstations were to move by the end of 2024. Eight years after the start, the move was not finished. And the affected building department belonged to the part that still stood on its own: because a specialist application depended on it, because responsibility was disputed, or because it simply never reached the top of the list. This is the pattern, and it is a familiar one: a clean, hardened centre, and next to it a remainder nobody has touched. Security protects what is in the project plan. The attacker takes what is not. > Security protects what is in the project plan. The attacker takes what is not. No sophisticated zero-day attack was needed, no work of state-sponsored super hackers. A door was enough, one nobody inside thought about any more because it sat in a part of the building that nobody formally felt responsible for. ## Invest More, Says the Senator The response came quickly and by routine. A crisis unit, set up the day before. Investigations by the State Criminal Police Office, the public prosecutor and the BSI, Germany's Federal Office for Information Security. A spokesperson assured the public that the department remained "operational" and that office presence secured the critical processes. And Economics Senator Franziska Giffey called for what is always called for in weeks like this: significantly more investment in IT security. Investing more sounds right, and in principle it is. It just misses the problem by a small margin. The centre was not underfunded. It was hardened, and it held. What failed was not the investment in the new but the unfinished farewell to the old. You cannot finance a gap in accountability away. You can only close it when someone takes over the last, thankless server that nobody wanted. Security expert Manuel Atug put into words on RBB what many were thinking: despite earlier promises of improvement, Berlin's IT security had, if anything, got worse. It was not the first attack. The berlin.de portal was hit in 2025, and so was the justice administration. By now the script is familiar. ## A Framework Is Not Yet Governance Four weeks before that Tuesday, in mid-July, Berlin and Brandenburg had adopted their new innovation strategy, InnoBB 2035. Five fields of the future, four success factors, one of them "innovation-friendly framework conditions". A good framework. A photo, a resolution, an ambition. And then, four weeks later, a very basic framework condition fails, the state's own network, through a door that a programme from 2018 should long since have closed. The city had a strategy for 2035 and a server from a time when it had meant to migrate it. The server won. It is the same gap I have written about here before, only this time not on paper but in a real incident. Adopting a framework is the pleasant part. Governance is the thankless work that follows: staying on it, finishing it, pulling every loose thread through to the end. The framework is born at the ceremony. The migration dies in the small print. ## The Institution Caught in a Pincer The truly unsettling part shows when you set this attack next to another Berlin figure. The Technologiestiftung Berlin's innovation survey has just measured how companies use AI: with generative AI, thirty percent work through employees who use it on their own initiative, but only twelve percent have an internal, approved solution. Shadow AI. The workforce is running ahead of the organisation. The cyberattack is the mirror image. Not a tool that runs ahead of governance, but an infrastructure that lags behind it. Shadow IT instead of shadow AI. And between the two sits the same institution: overtaken at the front by a tool it cannot slow down, weighed down at the back by a debt it does not pay off. > At the front, the tool nobody slows down. At the back, the server nobody gets rid of. In between, the administration. This is the boundary that has shifted. For decades the question was whether the technology could do it. It has long been able to. The question now is whether the institution keeps up: whether it finishes what it starts, and knows who answers for which box. That is not a question of computing power. It is a question of order. --- The most dangerous system in Berlin this August was not an artificial intelligence. It was a server nobody had moved, running an application nobody wanted to touch, behind a door nobody remembered. The strategy runs to 2035. The server dated from 2018. And for a few days in August, it was not the strategy that decided what the city could do, but the server. *A framework hangs on the wall. A door goes unnoticed until it stands open.* --- **Sources.** Tagesspiegel, taz, Behörden Spiegel, ad-hoc-news (cyberattack on the Senate departments for Urban Development/Building/Housing and Mobility/Transport/Environment/Climate Protection; made public on 18 Aug 2026, 10:12; disconnection from the state network, crisis unit and ban on working from home from 17 Aug; housing benefit for more than 50,000 households, education and participation package and online postal voting affected; investigations by the State Criminal Police Office, public prosecutor and BSI; statement by Economics Senator Franziska Giffey; "investigative reasons"; criticism by Manuel Atug on RBB). Entry through legacy IT not migrated to the ITDZ: reconstruction by the IT trade press (including borncity and blogspan) of the OneIT@Berlin programme; not officially confirmed. Technologiestiftung Berlin / ZEW: Berlin Innovation Survey 2025. InnoBB 2035, adopted July 2026. Figures and quotations paraphrased; German quotations translated. Related Posts ## You may also like this Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. [![FHIR, next-gen sequencing, and AI-enabled drug discovery for personalized, efficient treatments.](https://www.protagx.com/hubfs/Canva%20images/Canva%20Design%20DAFlu0H5Uh4.png)](https://www.protagx.com/en/ddd/next-healthcare-when-big-data-became-the-new-normal?hsLang=en) [precision data managment](https://www.protagx.com/en/ddd/tag/precision-data-managment) ### [Next Healthcare: When Big Data became the new Normal](https://www.protagx.com/en/ddd/next-healthcare-when-big-data-became-the-new-normal?hsLang=en) October 12, 2023 Drug Discovery Enabled by Big Data, FHIR, Next-Generation Sequencing, and Artificial Intelligence The healthcare... [Read more](https://www.protagx.com/en/ddd/next-healthcare-when-big-data-became-the-new-normal?hsLang=en) [![](https://www.protagx.com/hubfs/Banner%20-%20protagx%20-%20intelligenes%20%28Blog%20Banner%29.jpg)](https://www.protagx.com/en/ddd/have-you-heard-about-intelligene-yet?hsLang=en) [precision data managment](https://www.protagx.com/en/ddd/tag/precision-data-managment), [personalized medicine](https://www.protagx.com/en/ddd/tag/personalized-medicine), [trends](https://www.protagx.com/en/ddd/tag/trends) ### [Have you heard about Intelligene yet?](https://www.protagx.com/en/ddd/have-you-heard-about-intelligene-yet?hsLang=en) December 20, 2023 In a world where personalized treatment has become a reality rather than a distant dream, the arrival of IntelliGenes... [Read more](https://www.protagx.com/en/ddd/have-you-heard-about-intelligene-yet?hsLang=en) [![](https://www.protagx.com/hubfs/Banner%20-%20protagx%20-%20DNA%20digital%20twins%28Blog%20Banner%29.jpg)](https://www.protagx.com/en/ddd/unveiling-the-future-of-precision-medicine-digital-twins?hsLang=en) [data sovereignty](https://www.protagx.com/en/ddd/tag/data-sovereignty), [personalized medicine](https://www.protagx.com/en/ddd/tag/personalized-medicine), [digital twins](https://www.protagx.com/en/ddd/tag/digital-twins), [Health Digital Twins](https://www.protagx.com/en/ddd/tag/health-digital-twins), [HDT](https://www.protagx.com/en/ddd/tag/hdt) ### [Unveiling the Future of Precision Medicine: Digital Twins](https://www.protagx.com/en/ddd/unveiling-the-future-of-precision-medicine-digital-twins?hsLang=en) December 13, 2023 Digital twins are becoming a revolutionary concept, initially rooted in industries such as automotive and aerospace.... [Read more](https://www.protagx.com/en/ddd/unveiling-the-future-of-precision-medicine-digital-twins?hsLang=en) Free Guide ### How to increase your Facebook reach by over 200% with this simple trick Lorem ipsum dolor sit amet, consectetur adipiscing elit. Suspendisse varius enim in eros elementum tristique. [Download Guide](https://484997.hs-sites.com/lively/contact) ### Subscribe to our newsletter [![protagx-logo (1024 × 300 px)](https://www.protagx.com/hubfs/logos/protagx-logo%20(1024%20%C3%97%20300%20px).svg "protagx-logo (1024 × 300 px)")](https://protagx.com?hsLang=en) Christian Schappeit - Unternehmensberatung für Digital Business Consulting und Datenintegration. Als erfahrener CRM-Integrationsexperte und CMS-Stratege bin ich spezialisiert auf den Einsatz führender CRM-Plattformen wie Hubspot und Salesforce Health Cloud, ergänzt durch leistungsfähige Integrationstools wie Mulesoft. Mein Schwerpunkt liegt auf der Konzeption, Implementierung und Optimierung von datengesteuerten CRM-Systemen, die speziell für Unternehmen im Gesundheitswesen und in der Forschung entwickelt wurden. Ich bringe fundiertes Fachwissen bei der Erstellung und Verfeinerung von CRM-Strategien, der Verwaltung der nahtlosen Integration von CPQ-Prozessen und der Entwicklung effektiver Plattformen für Kunden- und Patientenbeziehungen mit, die die Patientenversorgung und Kundenzufriedenheit verbessern sollen. #### Pages - [Home](https://www.protagx.com/en/) - [About](https://www.protagx.com/de/about-protagx) - [Support](https://www.protagx.com/en/support) - [Contact](https://www.protagx.com/de/kontakt) #### Resources - [CRM Experts](https://www.protagx.com/en/protagx-crm) - Smart Tagging - Services - [Blog](https://www.protagx.com/en/ddd) [Customer Support](https://www.protagx.com/en/support?hsLang=en) --- - [Terms of Service](https://www.protagx.com/en/terms-of-service) - [Privacy](https://www.protagx.com/en/privacy-policy) - [Imprint](https://www.protagx.com/en/imprint) follow protagx on social media [Follow us on LinkedIn](https://www.linkedin.com/showcase/protagx) [Follow us on Twitter](https://x.com/protagxcom) [Follow us on Facebook](https://www.facebook.com/protagx) [Follow us on Facebook](https://www.instagram.com/instaprotagx) [Follow us on Facebook](https://www.youtube.com/@protagx) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Christian Schappeit", "url" : "https://www.protagx.com/en/ddd/author/christian-schappeit" }, "dateModified" : "2026-09-28T16:40:50.705Z", "datePublished" : "2026-08-19T18:05:22.000Z", "headline" : "The Door Nobody Remembered", "image" : [ "https://www.protagx.com/hubfs/AI-Generated%20Media/Images/Server%20Room%20in%20Overgrown%20Berlin%20Building%20with%20Open%20Door%20and%20Light.png" ], "mainEntityOfPage" : { "@id" : "https://www.protagx.com/en/ddd/the-door-nobody-remembered", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://www.protagx.com/hubfs/protagx-logo%20(1024%20%C3%97%20300%20px).svg" }, "name" : "protagx Inh. Christian Schappeit" } } ```