Germany’s AfD party says third parties accessed ten email mailboxes and several websites during September and October. Some of the copied data was later published. On October 29, Handelsblatt also reported the exposure of personal data linked to electoral lists in Mecklenburg-Vorpommern.
What AfD says happened
In a notice dated October 29, AfD says third parties accessed ten mailboxes in mid-September, then several websites in early October. The party says a substantial portion of the copied data, including emails, was published on October 19. It says its membership administration software was not affected.
The organization says it secured the affected systems, filed a criminal complaint and notified security and data protection authorities. It says it is still identifying affected people and the categories of information copied.
Why the exposure may extend beyond email
Attachments and long-running email threads can contain personal information shared over time. Handelsblatt reported that data about people on voter lists requested by AfD’s Mecklenburg-Vorpommern branch appeared in the published material. That is a specific aspect of the incident, alongside the mailbox breach confirmed by the party.
Publication of files alone does not establish which people were affected or whether every document is authentic and complete. Follow findings from the relevant organizations instead of drawing conclusions from a third-party data dump.
Precautions for potentially affected people
If you receive a notice, verify it through contact details published by the organization or an authority. Watch for unusual messages that use personal details to make a request seem credible, especially requests for payments, documents or login information.
Avoid downloading, searching or redistributing stolen files. Their contents can expose personal information, and handling them can create legal or security risks. Contact the relevant organization through a known channel if you receive a suspicious message.
What remains under investigation
AfD says its review of the data is not complete. The number of affected people, the information associated with each person and the initial access routes are not yet fully known publicly. Reporting about voter lists concerns one part of the leak and does not describe the entire incident.
The connection to Soclyde
A password manager helps teams use separate credentials for email and administrative services. Soclyde stores secrets in an encrypted vault on users’ devices, without a centralized cloud vault operated by Soclyde. It does not secure an organization’s email server or attachments that have already been sent. Read our guide to local and cloud password storage.
Key points
AfD confirmed access to mailboxes and several websites, followed by publication of some copied data. Handelsblatt reported that specific electoral data was also exposed. The scope is still being assessed: rely on verified notices and watch for requests that exploit personal details.
