Wagerenhof Foundation Reports Ransomware Attack and Suspected Data Leak
Summary
The Wagerenhof Foundation says a July 9 ransomware attack encrypted data and blocked access to systems. It is using alternative channels while investigating a suspected data leak; the extent and type of data involved remain unknown.
Key points
- The foundation says the ransomware attack occurred on the evening of July 9 and affected its virtual IT environment.
- Data was encrypted and access to multiple systems was blocked; the foundation disconnected systems and connections to limit potential data leakage.
- A ransom demand was received, but no attacker was identified; the foundation says it will not comply.
- The foundation reported the incident to Switzerland’s Federal Office for Cybersecurity (BACS), filed a criminal complaint, and engaged external ICT and cybersecurity partners and cantonal police.
- Servers, applications, documentation, landline telephony, and email were unavailable; alternative service and communication channels were put in place.
- The foundation suspects a data leak, but the data involved and the extent of any exposure remain unknown pending forensic evaluation.
Article Details
- Victim Organization
- Stiftung Wagerenhof
- Victim Domain
- wagerenhof.ch
- Incident Type
- Ransomware attack involving data encryption and blocked access to systems
- Operational Impact
- The server, application, documentation, landline telephone, and email environments were unavailable. The foundation used alternative service and communication channels; its businesses remained open with payment-option restrictions. The foundation said resident and employee safety and essential and medical care were not endangered. Restoration timing was unknown.
- Ransom Or Extortion
- The foundation received a statement claiming responsibility that included a ransom demand. It said it would not comply with the demands.
- Claim Status
- confirmed