Skip to content
Ransomware

Sileno Companies Inc targeted by Tengu ransomware group

The threat actor known as Tengu claims to have leaked data belonging to Sileno Companies Inc. The announcement states that over 67.07 GB of data has been exfiltrated.

By
Siberpol Intelligence Unit
Published
2 min read
2 min read
  • Ransomware group: Tengu
  • Country: Switzerland
  • Sector: Hospitality
  • Announcement date: March 7, 2026

Tengu claims data breach against Sileno Companies Inc

The threat actor known as Tengu has announced a cyberattack against Sileno Companies Inc. According to the announcement posted on a leak site on March 7, 2026, the group claims to have successfully exfiltrated a significant amount of data belonging to the organization.

This incident follows a pattern often seen in modern cybercrime, where threat actors utilize double extortion tactics. In such scenarios, attackers not only encrypt an organization's internal systems to disrupt operations but also steal sensitive information to use as leverage during ransom negotiations. By threatening to leak this data on public forums, attackers increase the pressure on the victim to meet their demands.

Details of the alleged attack

The Tengu group has provided specific claims regarding the timeline and scale of the operation. The group alleges that the attack took place on March 5, 2026. During a 14-hour period on that date, the threat actor claims that 22.9 TB of data was encrypted within the organization's environment.

In addition to the encryption of files, the group claims that more than 67.07 GB of data was extracted from the organization's systems. While the encryption of large volumes of data aims to halt business operations, the exfiltration of data serves as a secondary method of extortion, targeting the confidentiality of the organization's information.

Data involved in the incident

The listing does not provide specific details regarding the content of the leaked data. However, given the organization's operations in the hospitality and real estate sectors, it is possible that operational and administrative data may be involved.

  • No specific data types were named in the announcement.

It is important to note that no specific details regarding the content of the leaked data have been provided by the threat actor. No information was provided regarding the specific file types or the exact nature of the documents stolen.

About Sileno Companies Inc

Sileno Companies Inc. is a US-based company primarily operating in the hospitality and real estate sectors. The company provides services in hotel operations, property management, management of hotel restaurants and bars, and the development of hospitality projects.

Analysis and potential implications

This incident may be considered a ransomware case that could disrupt the organization's operational continuity. The alleged data breach could pose secondary risks, such as identity theft or targeted phishing attacks, for the organization's employees and customers. Furthermore, as the organization is based in Switzerland, the incident may have legal implications under the FADP (Federal Act on Data Protection).

Public information regarding the Tengu group is limited; there is insufficient data available on the group's past activities and methods. Because the group's tactics and history are not well-documented, organizations remain vulnerable to their evolving methods.

In response to such incidents, organizations typically need to initiate forensic investigations to determine the scope of the breach and notify relevant data protection authorities. For companies in the hospitality and real estate sectors, maintaining robust security postures is essential to protect sensitive operational and client information from the disruptive effects of ransomware and the privacy risks associated with data exfiltration.

Threat Intelligence

Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.

Related stories