Berliner Verkehrsbetriebe

Berliner Verkehrsbetriebe (BVG) is the primary public transportation provider for Berlin, operating the city’s U-Bahn subway system, tram network, bus services, and ferry routes on the Spree and Havel rivers. It delivers mobility solutions for residents, commuters, and tourists, integrating its services with regional rail and transport authorities to offer a cohesive travel experience across the metropolitan area. The organisation is responsible for vehicle maintenance, schedule planning, ticketing, and customer information, ensuring the continuous operation of essential urban transit infrastructure. As a critical infrastructure entity, BVG’s services are vital to the city’s daily functioning and economic activity.

BVG serves a large passenger base, moving millions of individuals each year through its extensive network that spans the entirety of Berlin and connects with surrounding Brandenburg regions. Its operational footprint includes numerous lines and stops, making it one of the largest public transport providers in Germany. The company’s role has been highlighted by the Federal Office for Information Security, which has warned of heightened cyber risks for critical infrastructure operators such as BVG. This recognition underscores the strategic importance of its transport services to national and regional resilience.

A distinguishing attribute of BVG is its near‑monopoly status on certain transit modes within Berlin, subject to regulatory oversight by the Berlin Senate Department for the Environment, Transport and Climate Protection. The organisation is known for maintaining high service frequency and reliability, which are key competencies in urban mobility provision. In May 2025, BVG experienced a cyberattack on an external service provider that handled customer correspondence, leading to unauthorized access to personal data such as names, addresses, email addresses, customer numbers, and contract numbers for approximately 180,000 customers; financial information was not compromised. In response, the service provider implemented additional security measures, and BVG engaged with the Berlin data protection authority to address the breach and mitigate risks of fraud or phishing. These events illustrate the organisation’s exposure to cyber threats despite its core focus on physical transport operations.

Structurally, BVG is a municipal enterprise owned exclusively by the state of Berlin (Land Berlin), operating under public law without a private parent company. Its ownership model aligns with its mandate to provide essential public services rather than pursue profit‑maximising objectives. This public ownership structure reinforces its accountability to governmental authorities and its role as a key component of Berlin’s public infrastructure.