In September 2026, the German right-wing political party Alternative für Deutschland (AfD) suffered a security breach involving one of its hosting providers, compromising parts of several email inboxes, according to Nieuwsblad. Hackers later published hundreds of thousands of files online, claiming access to over 400,000 internal emails.
Attackers Claim Access to 400,000 Internal Emails
- The Scope: Attackers claim access to more than 400,000 internal emails, though the AfD states current national accounts remain uncompromised.
- The Nature of the Leak: Rather than raw email files, a public website published artificial intelligence-generated summaries of the messages, as reported by De Telegraaf.
- Compromised Data: Sourced documents reportedly include personal identity cards, bank statements, membership lists, and invoices tied to regional branches.
Hosting Provider Vulnerability Exposes Inactive Accounts
The security incident occurred when unauthorized parties targeted a third-party hosting provider utilized by the political organization. According to statements released by the AfD and reported by Nieuwsblad, the breach affected segments of a small collection of email inboxes. The majority of these targeted accounts had reportedly remained inactive for years.
The party maintained that the primary communication channels currently operated by its national organization escaped the breach. However, actors behind the operation circulated a link pointing to an external website containing an index of alleged internal correspondence.
Leaked Files Link to Ten Specific Email Accounts
Independent verification of the leaked material remains unconfirmed by official investigators. De Telegraaf noted that the targeted website distributed artificial intelligence-generated summaries of the messages instead of the raw data files. German newspaper Bild reviewed a portion of the published correspondence.
The leaked files allegedly link back to ten specific email accounts. Prominent political figures connected to the exposed addresses include Alice Weidel and Leif-Erik Holm, alongside former party leader Alexander Gauland, and a contact address previously designated for the national headquarters.
Exposed Financial Records and Membership Lists
| Category | Reported Contents | Associated Entities |
|---|---|---|
| Financial Records | Invoices and bank statements | Regional party chapters |
| Personal Credentials | Identity cards and educational diplomas | Party members and affiliates |
| Administrative Data | Membership applications and lists | North Rhine-Westphalia branches |
Beyond correspondence, the review by Bild highlighted sensitive administrative files included in the leak. These records encompassed identity documents, invoices, bank statements, academic diplomas, and formal membership applications spanning regional party structures in North Rhine-Westphalia, as detailed by De Telegraaf.
The AfD confirmed that administrative teams identified the breach swiftly and notified relevant stakeholders. The party stated that the published files are currently under active investigation.
