Skip to content
Ransomware

Compagnie des Guides de Chamonix listed on radar ransomware leak site

France-based Compagnie des Guides de Chamonix has been listed on the leak site of the threat group known as radar.

By
Siberpol Intelligence Unit
Published
3 min read
3 min read
  • Ransomware group: radar
  • Country: France
  • Sector: Hospitality
  • Announcement date: September 11, 2025

Compagnie des Guides de Chamonix targeted by radar ransomware group

The threat group known as radar has officially listed the French organization Compagnie des Guides de Chamonix on its leak site. According to the announcement made on September 11, 2025, the group claims to have successfully compromised the digital assets of the institution, marking a significant security incident for the hospitality provider.

Details of the alleged cyber incident

The claims made by the radar group suggest that the breach occurred on August 15, 2025. The group alleges that they gained unauthorized access to the institution's digital infrastructure and subsequently exfiltrated data. Following this access, the group has shared samples of the allegedly stolen information to support their claims of a successful intrusion.

In many modern ransomware campaigns, threat actors employ a strategy known as double extortion. In this scenario, attackers do not merely encrypt an organization's systems to disrupt operations; they also focus on stealing sensitive information. By threatening to publish this data on public leak sites, the attackers aim to increase the pressure on the victim to meet their demands. This tactic is designed to exploit the potential for reputational damage and legal consequences that follow a public disclosure of sensitive information.

Information regarding the compromised data

The specific nature and categories of the leaked data have not been explicitly detailed in the provided records or screenshots. While the group has shared images that indicate the presence of various document samples, there is no specific information regarding the exact types of data that were compromised.

  • No specific data types were listed in the announcement.

When organizations face such incidents, the lack of clarity regarding what was stolen can create significant uncertainty for both the victim and the affected parties. Without a clear inventory of the exfiltrated files, it is difficult to immediately assess the full scope of the exposure.

About Compagnie des Guides de Chamonix

Compagnie des Guides de Chamonix is a well-established organization based in Chamonix, France. The institution provides professional mountain guiding and outdoor activity services. Their expertise includes offering guidance and training in various specialized areas, such as mountaineering, skiing, and hiking.

Potential implications and organizational response

This incident may pose a significant risk of exposing sensitive data belonging to the institution's customers and employees. Because the organization operates within France, a successful data breach could potentially lead to legal sanctions under the General Data Protection Regulation (GDPR). The publication of such data can result in lasting reputational damage and exposes individuals to various risks, including identity theft or targeted phishing attacks.

For organizations operating in the hospitality and service sectors, maintaining robust cybersecurity defenses is critical. Common defensive steps often include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular security awareness training for employees. Furthermore, when a breach is suspected, organizations typically need to initiate forensic investigations to determine the exact scope of the breach and notify the relevant data protection authorities to remain compliant with regional regulations.

Public information regarding the radar group remains limited in the public domain, making it difficult to attribute the attack to a specific known entity or to predict their future methodologies. As with any significant cyber incident, the organization may need to undergo a thorough investigation to mitigate the impact on its clients and its professional standing.

From the Professional plan

Phishing & Brand Protection

Monitor domains, phishing pages, ads and listings that impersonate your brand, and open takedown requests from the panel.

Related stories