Payload Claims Data Theft from Qualiflex Datacenter and Swiss Organizations

Summary
The actor payload claims it stole data from Qualiflex Datacenter and several Swiss organizations. The claim is attributed to the actor but remains unconfirmed by the article.
Key points
- The actor payload claims data was stolen from Qualiflex Datacenter and organizations including fh-hwz.ch, myenb.ch, schelling.ch, and kaelteringag.ch.
- The record lists additional affected organizations: kaeltebucher[.]ch, cbmswiss[.]ch, vitabad[.]ch, and ign8[.]ch.
- The claim is attributed to the actor's leak-site post and monitored by ransomware[.]live.
- The article says the claim could not be confirmed and invites an official statement from an affected organization.
Article Details
- Victim
- Qualiflex Datacenter and organizations whose data was reportedly taken from it: HWZ-Studiengänge (fh-hwz.ch), myenb.ch, schelling.ch, kaelteringag.ch, kaeltebucher.ch, cbmswiss.ch, vitabad.ch, and ign8.ch. The claim is unconfirmed.
- Claim Date
- 2026-08-20
- Encryption Status
- Unknown
- Exfiltration Status
- Claimed by the ransomware group; unconfirmed by the source.
- Exfiltrated Data
- Company data reportedly taken from Qualiflex Datacenter, including data associated with the listed organizations.
- Exfiltrated Size
- Not disclosed
- Ransom Demand
- Not disclosed
- Leak Status
- A claim was posted on the ransomware group's site; publication of the data is not confirmed.
