LowBreach / campaignMonitoring

Rhysida ransomware group claims Treuhand & Immobilien Abt AG on leak site

RansomLook reports the Rhysida group listed Treuhand & Immobilien Abt AG on its leak site, unconfirmed; partners should watch for an official notice.

Published
Exploitation
No, not confirmed: only a ransomware leak-site claim reported by RansomLook, with no confirmation from the company

What happened

A RansomLook entry dated 2026-11-07 reports that the Rhysida ransomware group has claimed Treuhand & Immobilien Abt AG on its leak site.

A listing on a leak site is the group’s own claim. It does not prove an intrusion. Only the headline could be reviewed because the full entry could not be read. The following details are not confirmed:

  • whether the company has confirmed any incident
  • whether any data was taken, and how much
  • how any access was gained
  • whether systems were encrypted

The sources reviewed contain no independent reporting on this claim.

Am I affected?

Not confirmed. The sources do not name any affected data, systems, customers or partners. For clients and partners of Treuhand & Immobilien Abt AG, the only available information is the claim listed by RansomLook.

What to do now

  1. Look for an official statement from Treuhand & Immobilien Abt AG before you act on the claim.
  2. Be careful with unexpected emails or calls that refer to this incident or ask for payments or credentials. Confirm any such request through a contact you already know.
  3. Check back for updates. This advisory is based only on a claim-tracker headline.

Sources