Soleol listed on RansomHouse leak site

• Ransomware group: RansomHouse
• Country: Switzerland
• Sector: Energy & Utilities
• Announcement date: November 12, 2025

Soleol listed on RansomHouse leak site

The renewable energy company Soleol has been listed on the leak site of the RansomHouse group. According to an announcement published by the threat actor group, the organization has been targeted in a cyberattack involving the alleged theft of confidential information.

The RansomHouse claim

The RansomHouse group published an announcement on November 12, 2025, claiming to have obtained data belonging to Soleol. This group is known for its focus on data theft and extortion, having maintained these activities since 2021. In their communication, the group threatens to leak or sell the institution's confidential data to third parties.

Ransomware groups like RansomHouse often employ a tactic known as double extortion. In this model, attackers do not merely encrypt a victim's systems to disrupt operations; they also exfiltrate sensitive data before the encryption occurs. The threat of releasing this stolen information on public leak sites serves as significant leverage to pressure the victim into paying a ransom. This method increases the pressure on organizations, as the risk shifts from mere operational downtime to long-term reputational and legal damage.

Details of the alleged data breach

Regarding the specifics of the incident, no specific details regarding the content of the leaked data have been provided by the attackers. The group has only indicated that files are available for download under the 'evidence packs' section of their leak site.

The listing names no specific data types that have been compromised.

About Soleol

Soleol is a Swiss-based solar energy company. It specializes in the design and installation of solar energy systems for residential, commercial, and public sector clients.

Potential impacts and organizational risks

This incident may create negative impacts on the institution's operational continuity and commercial reputation. As an entity based in Switzerland, a potential data breach could trigger legal processes under the Federal Act on Data Protection (FADP). The RansomHouse group's data exfiltration method may bring secondary risks such as identity theft or targeted phishing attacks for the institution's employees and customers.

Furthermore, the disclosure of the institution's intellectual property based on biomimetic technology could potentially harm its competitive advantage. When specialized technical data or proprietary designs are exposed, it can undermine the unique market position of a company within its specific industry.

For organizations operating in the energy and utilities sector, such incidents highlight the importance of robust defensive measures. Common defensive steps for organizations include implementing multi-factor authentication, maintaining offline backups, and conducting regular security awareness training to prevent initial access through phishing. Additionally, monitoring for unauthorized data exfiltration and implementing strict access controls can help mitigate the impact of a breach. As ransomware groups continue to evolve their extortion methods, maintaining a comprehensive incident response plan is essential for managing both operational and legal consequences.