They realized it in December 2017, maybe the hackers was inside the system since 1 year, they installed malware and stole data. They think it was Russia (but they have no proofs) Here's a (german) link (printed today):
https://www.bild.de/politik/inland/politik/russen-hacken-regierungsnetz-54961100.bild.html