Mettler Partner listed on Akira ransomware leak site

• Ransomware group: Akira
• Country: Switzerland
• Sector: Professional Services
• Announcement date: January 21, 2026

Akira claims data exfiltration from Mettler Partner

The Akira ransomware group has officially listed the Swiss professional services firm Mettler Partner on its dedicated leak site. According to the announcement made on January 21, 2026, the threat actor group claims to have successfully compromised the organization's data. The group has indicated that corporate data is expected to be published on their platform shortly.

Akira is a known Ransomware-as-a-Service (RaaS) operation that has been active since early 2023. The group is recognized for employing double-extortion tactics, a method where attackers not only encrypt an organization's systems but also steal sensitive information to use as leverage during ransom negotiations. In such scenarios, if the victim refuses to pay for the decryption keys, the attackers threaten to leak the stolen data publicly to cause reputational or legal damage.

While the group has made these claims, no screenshots were provided in the announcement to verify the presence of the stolen files on their site. Furthermore, no specific information was provided regarding the total size of the data stolen, the exact number of files involved, or the specific ransom demand being sought by the attackers.

Details of the alleged data breach

The announcement made by the Akira group specifies that a variety of sensitive information has been exfiltrated from the organization. The claims suggest that the breach involves highly sensitive personal and corporate documentation. The specific types of data mentioned in the leak site announcement include:

• Employee passports
• HR data
• Project files
• Internal documents

The inclusion of such sensitive documentation, particularly identity documents like passports, significantly increases the potential impact of the incident. The theft of HR information and internal documents suggests a deep penetration into the organization's administrative and operational files.

About Mettler Partner

Mettler Partner is a firm specializing in innovative and sustainable electrical and lighting solutions that blend functionality with aesthetics to enhance architectural visions. The company provides tailored electrical planning, consulting, and creative lighting design services.

Impact and risk assessment

This alleged data breach carries significant risks for both the organization and its employees. The exposure of employee passports and HR data may leave staff members vulnerable to identity theft. Furthermore, the potential publication of corporate project files and internal documents could impact the organization's intellectual property and trade secrets.

Because Mettler Partner is based in Switzerland, this incident may lead to legal consequences under the Federal Act on Data Protection (FADP) and the General Data Protection Regulation (GDPR). Additionally, the leaked data could be utilized by malicious actors for targeted phishing campaigns, where attackers use stolen information to craft highly convincing fraudulent messages to trick employees or clients.

The Akira group is known for its tendency to exploit vulnerabilities in VPN accounts to gain initial access to networks. This suggests that the organization's network security may contain vulnerabilities that allowed the attackers to move through the environment. For organizations in the professional services sector, maintaining robust security protocols is vital. This typically includes implementing multi-factor authentication (MFA) on all remote access points, such as VPNs, and conducting regular vulnerability assessments to identify and patch security gaps before they can be exploited by RaaS groups.