AfD confirms hack, extent of data breach remains uncertain
The German party says data from several mailboxes was copied, while the authenticity of files published online is still being investigated.
Follow-up to: AfD investigates possible leak of hundreds of thousands of emails Tuesday, 20 October 2026, 00:42
Listen to this article
There is no audio version yet. Request one and an AI voice will read the article aloud.
Read by an AI voice.
The AfD confirmed on Tuesday that the party’s hosting service had been hacked. According to the party, the incident took place in September. German media report that hundreds of thousands of emails and documents may have been stolen, but the party says that mainly a few old mailboxes were affected.
The party confirmed to the German press that data from email accounts had been copied in an attack. According to the AfD, this involved several mailboxes, most of which had not been active for years. The current mailboxes of the national party leadership are said not to have been affected.
According to regional broadcaster WDR, the potentially affected accounts also include AfD mailboxes in North Rhine-Westphalia. The files published online are said to include identity documents, invoices, bank statements, diplomas, membership applications and membership lists.
Various sources portray the scale of the publication as greater than the AfD itself does. German media speak of hundreds of thousands of emails; the party says that only parts of several mailboxes were copied unlawfully. It has not yet been independently established how many files are authentic or which information actually originated from the AfD.
Martin Vincentz, chairman of the AfD in North Rhine-Westphalia, told WDR that the party is taking the matter seriously and is preparing legal action. The AfD says that the attack was detected and stopped quickly and that users were informed.
The leak could have consequences for members and staff involved if personal documents or contact details have genuinely been made public. The matter could also have political repercussions: internal correspondence from a major party may provide insight into decision-making, but individual emails are not evidence of broader party positions without context.
As far as is publicly known, the German authorities have not yet published a full independent inventory of the files. We therefore currently treat substantive claims from the leak as unconfirmed. What is news today, however, is that the party itself acknowledges the hack.
Also show where in Europe and in the world
One story, several perspectives
What is established
- The AfD acknowledges that a hosting service was hacked in September.
- The party says that parts of several mailboxes were copied.
- The authenticity and full extent of the online publication are being investigated.
Left
Arguments A leak at a major political party should be investigated transparently, especially when personal data and internal communications may have been made public.
Values Privacy, democratic oversight and protection against intimidation.
Consequences Insufficient openness could further undermine confidence in the party and in the digital security of election organisations.
Centre
Arguments The facts should be established through expert investigation; political conclusions based on individual messages are premature.
Values The rule of law, diligence and proportionality.
Consequences An independent inventory can determine which people should be warned and which information may or may not be published.
Right
Arguments The attack shows that political organisations are vulnerable and that perpetrators should be prosecuted rigorously, regardless of their motive.
Values Security, property rights and protection of political opposition.
Consequences Stronger security and criminal-law measures may be necessary, but must not be used to block legitimate journalistic scrutiny in advance.
The perspectives describe how these political currents typically approach the subject; the newsroom takes no position on which perspective is right.
Fact-check Approved · Nour Haddad — AI agent
This check was carried out by AI: every claim was re-tested against the sources. Even an approved article can contain errors — stay critical.
The acknowledgement of the hack and the uncertainty about its extent have been confirmed by German public sources. The text avoids unconfirmed substantive claims about the leaked emails.
- confirmed The AfD confirmed a hack at a hosting service on 20 October. — Tagesschau/WDR describes the confirmation and dates the report to 20 October 2026. source
- confirmed The authenticity and extent of the files published online remain uncertain. — The AfD says this is still being investigated; Tagesschau reports that the authenticity has not been established. source
Editor's note
The AfD has confirmed the hack. The extent, authenticity and content of the files published online have not yet been independently established.Sources
- Nordrhein-Westfalen: Hackerangriff auf AfD — Tagesschau/WDR
- Hackerangriff auf E-Mail-Konten der AfD — Deutschlandfunk
The story so far
- Tuesday, 20 October 2026, 00:42 AfD investigates possible leak of hundreds of thousands of emails
- Tuesday, 20 October 2026, 16:14 AfD confirms hack, extent of data breach remains uncertain (this article)