Aschwanden & Partner targeted by Akira ransomware group

• Ransomware group: Akira
• Country: Switzerland
• Sector: Professional Services
• Announcement date: January 23, 2026

Akira ransomware group claims data breach at Aschwanden & Partner

The Akira ransomware group has listed the Swiss engineering and planning firm Aschwanden & Partner on its dedicated leak site. According to the announcement made on January 23, 2026, the threat actors claim to have successfully exfiltrated a significant volume of corporate data belonging to the organization. This development follows the group's established pattern of targeting various sectors to exert pressure on victim organizations through the threat of data exposure.

Details of the alleged attack

The threat actor's announcement, posted on January 23, 2026, claims that the group has obtained approximately 37 GB of data from Aschwanden & Partner. While the group has officially listed the organization on their leak site, they have not provided a ransom demand or a specific screenshot to validate the contents of the stolen files. The group has indicated that the relevant data is scheduled to be published on their platform in the near future, a common tactic used in extortion attempts to increase psychological pressure on the target.

The alleged data exfiltration involves several categories of sensitive information. Based on the claims made by the Akira group, the following types of data are reportedly involved:

• Employee personal information
• Financial records
• Payment details
• Project documentation
• Technical drawings

It is important to note that no specific screenshot has been provided by the attackers to confirm the presence of these files at this time.

About Aschwanden & Partner

Aschwanden & Partner AG is a specialized engineering and planning firm based in Switzerland. The organization possesses over 38 years of experience in the industry and focuses on providing safety solutions within various planning processes. Their professional expertise covers several critical areas, including building construction, bridge construction, geotechnics, and earthquake safety studies.

Potential impact and industry implications

The alleged leak of such a diverse range of data carries significant risks for both the institution and its stakeholders. The inclusion of employee personal information and payment details in the claim suggests an increased risk of identity theft or fraud for the firm's staff and clients. Furthermore, the potential exposure of project specifications and technical drawings could pose a direct threat to the institution's trade secrets, potentially undermining their competitive advantage in the engineering sector.

From a regulatory perspective, because the organization is based in Switzerland, a confirmed data breach of this nature could trigger complex legal processes under local data protection regulations as well as the General Data Protection Regulation (GDPR) in the EU. The nature of the claim suggests that the Akira group is employing a double extortion method. In such scenarios, attackers do not merely encrypt systems to disrupt operations but also steal sensitive data to threaten its public release, thereby exerting maximum pressure on the organization's operational continuity.

For organizations operating in the professional services and engineering sectors, such incidents highlight the necessity of robust data protection frameworks. Common defensive strategies often include implementing strict access controls, maintaining comprehensive logging to detect unauthorized data movement, and ensuring that technical drawings and project documentation are stored in encrypted environments. As information regarding the Akira group remains limited, organizations are advised to remain vigilant against the evolving tactics used by such threat actors.