LockBit 2.0 ransomware group lists www.wimmog.ch on its leak site

• Ransomware group: LockBit 2.0
• Country: Switzerland
• Announcement date: March 2, 2022

LockBit 2.0 claims data breach against Wimmog AG

The ransomware group known as LockBit 2.0 has announced the listing of the Swiss-based organization Wimmog AG on its dedicated leak site. This announcement, which surfaced on March 2, 2022, marks a claim of a data breach against the institution. Such listings are a common tactic used by ransomware operators to pressure victims into meeting ransom demands through the threat of public data exposure.

LockBit 2.0 is a Ransomware-as-a-Service (RaaS) group that has been tracked by security researchers since 2019. This specific incident occurred during the group's LockBit 2.0 era, which began in 2021. While the group's infrastructure was later disrupted by an international operation in February 2024, this particular claim remains a documented part of their historical activities during 2022.

Details of the alleged incident

According to the claim published by the group on March 2, 2022, Wimmog AG was added to their platform as a victim of a cyberattack. The group's announcement serves as a public notification of the alleged breach, which is a standard procedure for groups employing double extortion tactics. In these scenarios, attackers not only encrypt an organization's data but also threaten to leak sensitive information to damage the victim's reputation or force payment.

Regarding the specifics of the breach, the listing provides no details regarding the nature of the alleged leaked data. There are no screenshots provided, and no specific information is available concerning the volume of files or the specific types of data that were purportedly compromised during the event.

About Wimmog AG

Wimmog AG is a company based in Switzerland that operates within the real estate sector. The organization provides a variety of professional services, including property management, leasing, and real estate portfolio management. Given its role in managing assets and handling client information, the company's data security is critical to its operational integrity.

Potential implications and security considerations

This incident may indicate potential vulnerabilities within the institution's data security processes. If the claim made by LockBit 2.0 is verified, the organization could face significant secondary risks. These risks include the potential for identity theft or the emergence of targeted phishing attacks aimed at the institution's customers and employees.

Furthermore, because Wimmog AG operates in Switzerland, any confirmed data breach may lead to legal consequences under the Federal Data Protection Act (FADP). This highlights the importance of maintaining rigorous compliance and data protection standards to mitigate legal and regulatory exposure.

For organizations operating in similar sectors, maintaining robust defensive postures is essential. Common defensive steps include implementing multi-factor authentication, maintaining regular offline backups, and conducting frequent vulnerability assessments to identify and patch security gaps before they can be exploited by ransomware groups.