VULNpocalypse
LowBreach / campaignMonitoring

HighTec AG: The Gentlemen ransomware group claims attack on its leak site

The Gentlemen ransomware group claims HighTec on its leak site, per RansomLook; unconfirmed, so HighTec customers should watch for official notices.

Published
Exploitation
Not confirmed, the only evidence is a leak-site listing recorded by RansomLook

What happened

According to the ransomware tracker RansomLook, the group calling itself The Gentlemen listed “HighTec” (hightec.ch) on its leak site, with a post dated 2026-11-02. The listing is a claim made by the group. It is not proof of a breach.

The group’s post, as recorded by RansomLook, describes HighTec AG as a Swiss industrial engineering company founded in 1988 in Winterthur. The post says the company builds surface treatment systems such as painting booths, powder coating lines and drying systems.

What is not confirmed:

  • HighTec has not confirmed an incident in the provided sources.
  • No independent outlet has verified the claim. The only source is a claim tracker.
  • The HighTec listing does not state a data volume or describe any stolen data. That detail is not confirmed.
  • The entry point, the timing of any intrusion and whether systems were encrypted are not confirmed.

Am I affected?

Not confirmed. The sources do not name any affected data, customers, partners or products. If you are a HighTec customer, supplier or employee, nothing in the sources shows that your data is involved.

What to do now

  1. Watch for an official statement from HighTec AG through channels you already use with the company.
  2. Be careful with unexpected emails, invoices or payment-change requests that mention HighTec or this incident, and verify them through a known contact.
  3. Do not download or open files described as HighTec leak data.

Sources