Ransomware Gang Targets Deutsche Welthungerhilfe, Demands $2.1 Million for Stolen Data Deutsche Welthungerhilfe (WHH), a German humanitarian charity providing emergency aid to 16.4 million people in crisis zones like Gaza, Ukraine, and Sudan, has fallen victim to a ransomware attack. The organization, which delivers food, water, and medical supplies to vulnerable populations, confirmed the breach to Recorded Future News after a ransomware-as-a-service (RaaS) group listed it on a darknet leak site. The attackers are attempting to sell stolen data for 20 bitcoin approximately $2.1 million though it remains unclear whether WHH’s systems were encrypted. The charity has refused to pay the ransom, stating that affected systems were immediately isolated and external cybersecurity experts were engaged to mitigate the incident. Additional security measures have since been implemented. WHH has notified data protection authorities, law enforcement, and its internal data protection officer while maintaining operations in its project countries. The charity emphasized that its humanitarian work remains unaffected, despite the ongoing global crises it addresses. The RaaS group behind the attack has a history of targeting critical organizations, including hospitals such as Chicago’s Lurie Children’s Hospital and Prospect Medical Holdings, as well as the disability nonprofit Easterseals in 2023.