Rhysida Claims Theft of 2.55 TB of Data from Electro Heat Sweden AB
Summary
Rhysida claims it stole 2.55 TB of data from Swedish manufacturer Electro Heat Sweden AB, including CAD designs, payroll records, employee personal data, and customer contracts. The claims have not been confirmed.
Key points
- The ransomware group Rhysida claims to have compromised Electro Heat Sweden AB in Sweden.
- The group alleges it exfiltrated 1,723,527 files totaling 2.55 TB.
- The alleged data includes SolidWorks CAD designs and PDM drawing-vault backups.
- Other claimed data includes accounting and payroll databases, employee passport and visa details, and customer contracts.
- The monitoring post says the claims are based on Rhysida’s public statements and have not been independently confirmed.
Article Details
- Victim
- Electro Heat Sweden AB
- Claim Date
- 2026-10-02
- Encryption Status
- Unknown; the source does not report whether data was encrypted.
- Exfiltration Status
- Claimed by Rhysida; the source says the claim is unconfirmed.
- Exfiltrated Data
- Rhysida alleges theft of SolidWorks CAD designs and PDM drawing-vault backups, accounting and payroll databases, legally sensitive documents, employee personal data, and signed customer contracts and acceptance certificates.
- Exfiltrated Size
- 2.55 TB; Rhysida also claims 1,723,527 files.
- Leak Status
- The source reports a Rhysida claim and provides its archive listing; publication or authenticity of the alleged data is unconfirmed.
Threat Actors
Products
SolidWorksElectro Heat Sweden AB in Sweden (SE) by exfiltrating 1,723,527 files totaling 2.55 TB, including SolidWorks CAD intellectual property and critical engineering and business records such as Visma/SCPS accountingSPCSAccounting and payroll data, including Visma databases and SPCS payroll databases for four legal entitiesVismaTB, including SolidWorks CAD intellectual property and critical engineering and business records such as Visma/SCPS accounting and payroll databases.