Propulsion Academy AG listed on fog ransomware leak site
Propulsion Academy AG has been listed on the leak site of the ransomware group known as fog. The group claims to have obtained the institution's Gitlab source code.
- Published
- 2 min read
- 2 min read
- Ransomware group: fog
- Country: Switzerland
- Sector: Education
- Announcement date: February 4, 2025
Propulsion Academy AG listed on fog ransomware leak site
Propulsion Academy AG has been listed on the leak site of the ransomware group known as fog. The group claims to have obtained the institution's Gitlab source code, marking a significant potential breach for the technology education provider.
Claims of the fog ransomware group
On January 31, 2025, the fog group listed data allegedly belonging to Propulsion Academy AG on its leak site. According to the group's announcement, they claim to have successfully exfiltrated source code from the institution's Gitlab platform. This type of activity is common in modern cyberattacks, where threat actors move beyond simple encryption to focus on data theft.
The announcement made by the group does not stop at a single target. The listing also includes data that the group purports to belong to other entities, specifically Professional Computer Co., Ltd. and X-Pans. This multi-target approach is a frequent tactic used by ransomware groups to increase their leverage during negotiations.
Details of the alleged data leak
The announcement specifies that Gitlab source code belonging to Propulsion Academy AG has been leaked. While the total volume of the breach has not been fully quantified in all metrics, the provided documentation includes a screenshot displaying three separate torrent links. Each of these links is claimed by the group to be 1 GB in size.
The specific types of data identified in the claim include:
- Source code
It is important to note that no information was provided regarding the specific ransom demand or the exact total size of the exfiltrated data beyond the torrent claims.
About Propulsion Academy AG
Propulsion Academy is a technology education institution based in Switzerland. The organization specializes in providing intensive training programs and bootcamps designed to equip students with high-demand technical skills. Their curriculum focuses on critical fields such as data science, software development, and cybersecurity.
Implications and organizational risks
This alleged leak may pose a significant risk to the institution's intellectual property and software assets. The exposure of source code is particularly sensitive, as it could lead to the identification of vulnerabilities in the technologies developed by the institution. Such vulnerabilities may result in an increase in targeted attacks against the organization's infrastructure or its students.
Furthermore, because the institution is based in Switzerland, a potential data breach could trigger legal proceedings under the Federal Act on Data Protection (FADP). Organizations operating in the education sector must be aware that the loss of proprietary code and student-related data can lead to both regulatory scrutiny and reputational damage.
In many modern ransomware scenarios, groups utilize stolen data for secondary extortion. This involves threatening to release sensitive information to the public or clients if a ransom is not paid, even if the original systems have been restored. To defend against such threats, organizations typically focus on robust access controls for development environments, such as Gitlab, and implement strict monitoring of data exfiltration patterns. While information regarding the fog group remains limited, the potential for secondary extortion and reputational harm remains a primary concern for targeted entities.