PIBOR ISO SA listed by Akira ransomware group

• Ransomware group: Akira
• Country: Switzerland
• Sector: Manufacturing
• Announcement date: March 17, 2025

The Akira ransomware group has listed the Swiss-based organization PIBOR ISO SA on its dedicated leak site. The threat actors claim to have successfully exfiltrated sensitive corporate data from the company's network, threatening to publish the stolen information if their demands are not met.

The claimed attack and data exfiltration

According to the announcement made on March 17, 2025, the Akira group claims to have gained unauthorized access to the internal network of PIBOR ISO SA. The group has stated that they have obtained various corporate documents during this intrusion. The threat actors have announced their intention to publish the stolen data on their leak site, a common tactic used by modern ransomware operations to exert pressure on victims.

The group has specifically claimed that the volume of data they intend to release amounts to 32 GB. While the group has made these claims regarding the size and nature of the breach, no screenshots or additional evidence were provided in the leak site announcement to verify the contents of the stolen files. The announcement type is categorized as a data leak, highlighting the focus on information theft rather than just system encryption.

The types of data involved in the leak

The information allegedly stolen by the Akira group is described as being highly sensitive and critical to the company's operations. The group claims that the leaked dataset includes a wide variety of corporate and personal information. The specific categories of data mentioned in the claim include:

• Financial data
• Employee contact information
• Customer contact information
• Internal corporate correspondence
• Licenses
• Contracts

The inclusion of such diverse data types suggests a comprehensive breach of the organization's digital environment, covering everything from high-level legal agreements to individual contact details.

About PIBOR ISO SA

PIBOR ISO SA is an industrial company based in Switzerland. The organization specializes in the design and manufacturing of precision watch components. It plays a role in the production of various technical parts specifically tailored for the watchmaking industry, making it a specialized player within the manufacturing sector.

Analysis and potential implications

This alleged leak poses significant secondary risks to both the organization and the individuals involved. The exposure of employee and customer contact information can lead to targeted phishing attacks or identity theft. Furthermore, the claim that financial data, licenses, and contracts were stolen suggests that the company's trade secrets and overall financial security could be at risk of compromise.

Because PIBOR ISO SA is based in Switzerland, this incident may lead to legal consequences under the General Data Protection Regulation (GDPR) and local data protection regulations. The Akira group appears to be utilizing a double-extortion method, which involves both encrypting systems and threatening to leak data. This method is designed to maximize pressure on an organization's operational continuity by threatening their reputation and legal standing.

In the manufacturing sector, such breaches can disrupt supply chains and damage long-standing business relationships. Organizations facing similar threats often focus on strengthening network segmentation, implementing robust identity and access management, and maintaining comprehensive offline backups. While information regarding the specific tactics of the Akira group remains limited, their use of data exfiltration as a primary leverage tool is a growing trend in the ransomware landscape.