Hacker Leaks 281 GB of Internal Emails from Germany’s AfD Party

What happened

A hacker breached the AfD’s hosting provider in September 2026, copied mailboxes, and published a 281 GB archive of internal emails and files via a torrent site that also provides AI‑generated summaries.

Why it matters for trust and compliance

• The incident underscores the importance of a control‑assurance program that continuously monitors third‑party security hygiene and retains evidence of due‑diligence, directly addressing the vendor‑risk management objective.
• Continuous monitoring of hosting providers to detect unpatched assets.
• Documented evidence of vendor security assessments for audit readiness.

Who is affected

Recommended actions

1. Audit existing hosting contracts for security‑maintenance clauses.
2. Request and review the provider’s patch‑management logs.
3. Deploy continuous third‑party monitoring tools and retain logs as audit evidence.