Sinobi ransomware group lists glawitsch-sutter on its leak site

• Ransomware group: Sinobi
• Country: Switzerland
• Sector: Professional Services
• Announcement date: October 27, 2025

Sinobi ransomware group claims attack on Glawitsch Sutter

The threat actor known as Sinobi has officially listed the Swiss-based law firm Glawitsch Sutter on its dedicated leak site. According to the announcement made on October 27, 2025, the group claims to have successfully carried out a cyberattack against the organization, resulting in both the encryption of systems and the exfiltration of sensitive information. This type of activity is characteristic of modern ransomware operations, often referred to as double extortion, where attackers not only lock a victim's files but also threaten to release stolen data to pressure the organization into paying a ransom.

The group has issued a formal ransom demand as part of this extortion attempt. The stated amount required to prevent the release of the stolen data is 700,000 USD. While the specific details regarding the exact volume of data stolen or the total number of files compromised were not provided in the announcement, the group has explicitly identified the categories of information they claim to possess.

Claimed data categories and impact

The announcement by Sinobi indicates that the breach involves highly sensitive information. The threat actor claims to have accessed and potentially leaked data that falls under several critical categories. According to the leak site post, the compromised information includes:

• Confidential information
• Customer data
• Contracts

The exposure of such data, particularly within a legal context, presents significant risks. The presence of contracts and customer data suggests that the integrity of private agreements and personal client details may be at stake. In many ransomware scenarios, the goal of the attacker is to use the threat of public exposure to bypass traditional backup-and-restore recovery methods, forcing the victim to engage with the threat actor to protect their reputation and legal standing.

About Glawitsch Sutter

Glawitsch Sutter Rechtsanwälte GmbH is a well-established law firm based in Switzerland. Originally founded in 1932, the firm has a long history of providing professional legal services. The organization provides legal consulting and representation services to a variety of clients, including both individuals and corporate entities, across numerous different legal fields.

Risk assessment and industry implications

The claim against Glawitsch Sutter highlights the specific vulnerabilities faced by the professional services sector. Because the organization operates as a law firm, the exfiltrated data may pose a high risk regarding client confidentiality and the attorney-client privilege. The sensitive nature of legal work means that any breach of data can have profound implications for the trust established between a legal professional and their client.

Furthermore, the firm may face significant legal obligations under Swiss data protection regulations, specifically the Federal Act on Data Protection (FADP). Beyond the immediate legal and regulatory challenges, the exposure of customer data could potentially lead to secondary risks for the affected individuals, such as identity theft or the execution of targeted phishing attacks using the stolen information.

While public information regarding the Sinobi group remains limited, their demand for a specific monetary sum confirms that the group is motivated by financial gain. For organizations in the professional services sector, such incidents underscore the importance of robust cybersecurity frameworks. Common defensive steps for organizations include maintaining offline, immutable backups, implementing strict access controls to sensitive client files, and conducting regular employee training to recognize phishing attempts, which are often the initial entry point for such actors.