AfD Hack Explained: 421,000 Emails Leaked Online

The Alternative für Deutschland (AfD) email hack has exposed more than 421,000 internal messages, including correspondence from co-leader Alice Weidel and honorary chairman Alexander Gauland. First reported by the German tabloid Bild on 20 October 2026, the breach has reignited debate about the far-right party's internal culture and the digital security of political organizations.

What is the AfD email hack?

The AfD confirmed that unknown hackers copied data from a limited number of party email accounts at an external hosting provider. Most of the affected mailboxes had been unused for years, according to a party spokesperson. The attack took place in September 2026, but the 281-gigabyte archive was published online only this week.

This breach follows a pattern of cyberattacks targeting political parties across Europe, where stolen correspondence is used to pressure or discredit organizations ahead of elections.

What data was leaked in the AfD breach?

According to Stern magazine, the leaked archive contains 421,179 emails spanning from 2014 to 12 September 2026. Of those, 39,000 include one or more attachments, totaling 49,000 documents such as ID card photos, bank statements, academic certificates, membership applications and district association member lists.

The hackers published nearly 60,000 emails on a searchable website, organized into categories ranging from minor misconduct to documents allegedly showing 'criminal acts or violence.' An automated review reportedly rated 611 messages as 'critical' and 10,450 as indicating serious misconduct.

What do the leaked AfD emails reveal?

Stern highlighted several messages that have drawn attention. In one exchange between two AfD members from North Rhine-Westphalia, the subject line refers to the 'sale of swastika flags and drugs at an information stand in Bottrop by a department chairman.' Another email allegedly shows a district chairman from Lippe sending a Christmas card featuring a swastika and the Nazi salute 'Heil Hitler.'

These examples have reinforced the view of Germany's domestic intelligence agency, the BfV, which in May 2025 classified the AfD as a confirmed right-wing extremist endeavor. The agency has long warned that xenophobia, racism and antisemitism are widespread within parts of the party.

How has the AfD responded to the hack?

'The attack was illegal, criminal, and an attack on Germany's party system and thus on democracy,' an AfD spokesperson said in a statement quoted by Handelsblatt. Officials stressed that current federal party mailboxes were not affected and that only dormant accounts were copied. The party says the attack was detected and stopped quickly, and that affected users were informed.

Security specialists and party officials are now checking the authenticity of the published files, including whether manipulated documents were inserted. The hosting website went offline by Tuesday afternoon, but archived copies of the 281-gigabyte dataset remain in circulation.

Impact and political implications

The leak arrives at a sensitive moment. The AfD won 20.8% of the vote and 152 seats in the 2025 federal election, becoming Germany's largest opposition party. Polls before Saxony-Anhalt's September 2026 state election showed the party near 40%. The AfD's right-wing extremism classification has already fueled calls for a ban, and the leaked emails may provide fresh ammunition for critics while galvanizing the party's base.

Analysts note that the hack could also raise questions about the digital security of German political parties and whether sufficient safeguards are in place for sensitive membership data.

FAQ: AfD email hack explained

How many AfD emails were leaked?

Hackers published 421,179 emails, a 281-gigabyte archive dating from 2014 to 12 September 2026.

Whose AfD emails were stolen?

The data includes accounts linked to co-leader Alice Weidel, honorary chairman Alexander Gauland and MP Leif-Erik Holm, plus party membership lists and personal documents.

When did the AfD hack happen?

The breach occurred in September 2026 through an external hosting provider, and the files were published online in mid-October 2026.

Is the leaked AfD data authentic?

Not yet confirmed. The AfD and independent security experts are still verifying whether all documents are genuine or whether manipulated files were inserted.