Caprez Ingenieure AG listed on dragonforce leak site

• Ransomware group: dragonforce
• Country: Switzerland
• Sector: Professional Services
• Announcement date: September 1, 2025

Caprez Ingenieure AG targeted by dragonforce

The Swiss-based engineering firm Caprez Ingenieure AG has been listed on the leak site of the ransomware group known as dragonforce. According to an announcement posted on the group's platform, the organization has allegedly been the victim of a data breach. The claim was made on September 1, 2025, and the group asserts that the attack occurred on the same date.

Ransomware groups often utilize leak sites as a method of double extortion. In this model, attackers not only encrypt an organization's internal systems to disrupt operations but also steal sensitive information to use as leverage. By threatening to publish stolen data on public platforms, these groups aim to pressure victims into paying a ransom to prevent the exposure of confidential information. This tactic increases the pressure on companies, as the leak of proprietary data can lead to significant reputational and legal consequences.

Details of the alleged breach

The dragonforce group claims to have obtained a significant volume of data belonging to Caprez Ingenieure AG. According to the group's announcement, the compromised data amounts to a total of 746.85 GB. The group published this claim on their leak site on September 1, 2025.

Regarding the specific contents of the stolen information, the listing provides no details on the nature of the files. There is no information provided regarding the specific file types or the exact categories of data that were allegedly exfiltrated, other than the total volume of 746.85 GB.

About Caprez Ingenieure AG

Caprez Ingenieure AG is an engineering firm based in Switzerland. The company provides a wide range of technical services across various engineering disciplines. Their expertise includes structural engineering, civil engineering, and bridge design. Additionally, the firm is involved in water supply, sewage systems, and building maintenance services.

Potential risks and industry implications

This alleged breach may pose a risk of exposure for Caprez Ingenieure AG's corporate data, employee information, or sensitive engineering project documentation. Given the firm's location in Switzerland, a confirmed breach could trigger legal proceedings under the Swiss Federal Act on Data Protection (FADP). The regulatory environment in Switzerland requires strict adherence to data privacy standards, and any confirmed unauthorized access to personal or corporate data can result in significant legal scrutiny.

Furthermore, the dragonforce group's reported model of providing infrastructure to affiliates may lead to the data being utilized by various actors in secondary attacks or targeted phishing campaigns. When data is leaked or sold to affiliates, it often enters a broader ecosystem of cybercrime, where it can be repurposed for identity theft, fraudulent activities, or further targeted attacks against the original victim or their partners.

Considering the firm's operations in the engineering sector, long-term risks such as the infringement of intellectual property rights and the exposure of trade secrets may be observed. For organizations in the professional services and engineering sectors, protecting technical designs, project specifications, and proprietary methodologies is critical. To defend against such threats, organizations typically implement multi-layered security strategies. These include robust backup solutions, strict access controls, continuous monitoring of network traffic, and comprehensive employee training to recognize phishing attempts. Maintaining a strong security posture is essential to mitigate the risks of intellectual property theft and to ensure compliance with regional data protection laws.