Chèvre & Rutsch & Herren Notariatsbüro listed by Qilin ransomware group

• Ransomware group: Qilin
• Country: Switzerland
• Sector: Professional Services
• Announcement date: February 4, 2026

The Qilin ransomware group has listed Chèvre & Rutsch & Herren Notariatsbüro on its dedicated leak site, alleging that the organization has been the victim of a data breach. This announcement, made on February 4, 2026, marks a significant escalation in the pressure exerted by the threat actor against the Swiss-based professional services firm.

The claims made by the Qilin group

According to the announcement posted on the group's leak portal, the Qilin group claims to have successfully gained unauthorized access to the systems belonging to Chèvre & Rutsch & Herren Notariatsbüro. The group asserts that they have obtained data from the organization's infrastructure during this intrusion.

This specific type of listing is a hallmark of modern ransomware operations, often referred to as double-extortion. In these scenarios, threat actors do not merely encrypt an organization's files to disrupt operations; they also steal sensitive information. The goal is to threaten the victim with the public release of this stolen data, thereby creating a secondary layer of pressure to compel the organization into paying a ransom to prevent the leak.

Details regarding the compromised data

At this stage of the incident, there is no clear information regarding the specific nature of the leaked or compromised data. While the group's listing includes a screenshot where the organization's name is visible, no specific file contents or data samples have been provided to the public to verify the scope of the breach.

The listing names no specific data types at this time.

About Chèvre & Rutsch & Herren Notariatsbüro

Chèvre & Rutsch & Herren is a notary office based in Bern, Switzerland. The firm provides essential notary services in several critical legal areas, including real estate transactions, corporate law, and inheritance law. Given the nature of these services, the firm handles a wide variety of sensitive legal documentation and personal information required for official transactions.

Implications and industry considerations

This incident may pose a significant risk of exposing sensitive notarial documents and personal data belonging to the organization's clients. Because the firm operates within Switzerland, the event may carry legal implications under the Swiss Federal Act on Data Protection (FADP). The potential exposure of such information can lead to severe consequences for the individuals involved.

Considering the past activities of the Qilin group, there is a possibility that the leaked data could be used for identity theft or fraud. Furthermore, the organization's presence in the professional services sector means that such a breach could lead to a loss of client trust and potential long-term reputational damage. The group's use of double-extortion methods suggests a high likelihood that a ransom demand will be issued to prevent the publication of the data.

For organizations operating in the professional services sector, such incidents highlight the necessity of robust cybersecurity frameworks. Defensive measures often include implementing strict access controls, maintaining comprehensive backups, and conducting regular security audits. Protecting sensitive client data is not only a technical requirement but a fundamental component of maintaining professional trust and complying with regional data protection regulations.