Camandona SA targeted in alleged data breach by Majinahanashi

• Ransomware group: Majinahanashi
• Country: Switzerland
• Announcement date: August 12, 2026

Majinahanashi claims data breach at Camandona SA

The threat actor group known as Majinahanashi has announced the alleged leak of files belonging to Camandona SA. According to an announcement published on the group's leak site on August 12, 2026, the group claims to have targeted the Swiss organization, asserting that the attack occurred on August 4, 2026. This incident follows a pattern often seen in modern cyberattacks where threat actors use public leak sites to pressure victims through the threat of data exposure.

Ransomware groups frequently utilize these platforms to host announcements regarding successful intrusions. In many cases, these groups employ a double extortion tactic, where they not only encrypt an organization's internal systems but also exfiltrate sensitive data to use as leverage. By threatening to release this information publicly, the attackers aim to maximize their bargaining power during ransom negotiations.

Details of the alleged claim

The Majinahanashi group has published a formal announcement on their dedicated leak site regarding an alleged data breach at Camandona SA. In the post, the group provides specific organizational details about the victim, claiming that the company employs 200 people and generates an annual revenue of $61.7 million. These details are often used by threat actors to demonstrate the scale and potential impact of the breach to both the victim and the public.

The group claims to have obtained a significant amount of information, specifically listing 9584 files as part of their leak activity. While the group has made these claims publicly, the actual validity of the breach and the authenticity of the files have not been independently verified. The announcement includes a screenshot that displays the general interface of the group's leak site, which is a common practice to prove the group's involvement in a specific campaign.

Data involved in the incident

Regarding the specific content of the files mentioned in the announcement, no specific details regarding the content of the leaked data have been provided, other than the total file count. The listing names no specific data types.

About Camandona SA

Camandona SA is a Switzerland-based engineering and construction company. The firm specializes in several critical areas of the industry, including construction, foundation engineering, and specialized structural works. The company focuses its operations on complex infrastructure projects and provides various structural solutions for large-scale developments.

Potential risks and organizational implications

This incident suggests a potential risk of exposure for the organization's operational data and employee information. Because the organization is based in Switzerland, a confirmed breach could lead to regulatory consequences under the Swiss Federal Act on Data Protection (FADP). Compliance with such frameworks is a critical aspect of data governance for European-based entities.

The publication of such data may create secondary risks, including identity theft or targeted phishing campaigns against staff and business partners. When sensitive corporate or personal information is leaked, it often becomes a resource for other malicious actors to conduct more sophisticated social engineering attacks. Such attacks can target specific employees to gain further access to the corporate network or to defraud business partners.

For organizations facing such threats, several defensive and reactive steps are typically necessary. The organization may need to initiate a forensic investigation to determine the scope of the exposure and notify relevant regulatory authorities. General defensive measures for organizations in the engineering and construction sector often include implementing robust access controls, maintaining regular offline backups, and conducting continuous monitoring of network traffic to detect unauthorized data exfiltration. Information about this specific threat group remains limited, which can make it difficult for organizations to develop specific indicators of compromise (IOCs) for this particular actor.