INP Schweiz Confirms Data Theft After Cyberattack; Akira Claims Attack

Summary
INP Schweiz says company data was stolen during a February cyber incident, but not sensitive customer, financial or personnel data. Akira claims the attack and says it holds about 9 GB; INP has not confirmed the perpetrators or extortion.
Key points
- INP Schweiz says the incident occurred overnight on February 25–26 and was detected on the morning of February 26; it disconnected systems and began recovery with external security partners.
- The company says operations resumed fully on February 28 and were not materially affected.
- INP Schweiz reports that data was stolen, but says it did not include sensitive customer, financial or personnel data; misuse cannot be ruled out.
- The company urged recipients to carefully check documents or invoices sent in its name.
- INP Schweiz reported the incident to authorities, including the Swiss Federal Office for Cybersecurity, and filed a criminal complaint against unknown perpetrators.
- Akira claims responsibility on its leak site, alleges it holds about 9 GB of company data, and threatens publication; INP has not confirmed the perpetrators or a possible extortion attempt.
Article Details
- Victim Organization
- INP Schweiz
- Victim Domain
- Unknown
- Incident Type
- Cyberattack involving confirmed data theft; Akira claimed responsibility and threatened to publish data, but the attribution and extortion were not confirmed by INP Schweiz.
- Incident Date
- 2026-02-25
- Data Types Exposed
- Company data; specific data types were not disclosed. INP Schweiz said the stolen data did not include sensitive customer, financial, or personnel data.
- Affected Records
- Unknown
- Affected Data Size
- Akira claimed to possess approximately 9 GB of company data; this amount was not confirmed by INP Schweiz.
- Operational Impact
- INP Schweiz disconnected its systems as a precaution and began recovery with external IT security partners. The company said operations resumed fully on 2026-02-28 and were not materially affected.
- Ransom Or Extortion
- Akira claimed responsibility on its leak site and threatened to publish data. INP Schweiz did not confirm the perpetrators or a possible extortion attempt.
- Claim Status
- confirmed
