SolGeo AG Baugelogie and Geotechnik listed by 8base ransomware group

• Ransomware group: 8base
• Country: Switzerland
• Sector: Professional Services
• Announcement date: January 3, 2025

8base claims a data breach against SolGeo AG Baugelogie and Geotechnik

The ransomware group known as 8base has officially listed SolGeo AG Baugelogie and Geotechnik on its dedicated leak site. Through this announcement, the threat actor claims to have successfully compromised the organization, alleging that a significant data breach has occurred. This type of public listing is a common tactic used by ransomware groups to exert pressure on their targets, often as part of a negotiation strategy to compel the victim organization to meet specific demands.

According to the claims made by 8base, the incident was discovered on January 3, 2025. The group asserts that confidential files belonging to the firm have been compromised and suggests that this sensitive information may be shared with third parties. By posting the organization's name on their portal, the group aims to increase the visibility of the attack and heighten the pressure on the victim to comply with their requirements.

Details of the claimed data exposure

While the specific volume of the stolen data and the exact amount of the ransom demand have not been disclosed by the group, the announcement provides a detailed list of the types of information that have allegedly been exfiltrated. The breadth of the data mentioned suggests a wide-ranging compromise of both corporate and personal information.

The data types listed in the announcement include:

• Identity documents
• Technical documents
• Reports
• Plans
• Receipts
• Mail protocols
• Conversation logs
• Confidentiality agreements
• Project files
• Email passwords
• Personal photos
• Accounting documents
• Schemes

The inclusion of such diverse data types, ranging from technical project files to personal email passwords and identity documents, highlights the potential severity of the breach. Such a variety of data indicates that the attackers may have gained access to multiple systems or directories within the organization's infrastructure.

About SolGeo AG Baugelogie and Geotechnik

SolGeo AG is a Swiss-based consulting firm headquartered in Solothurn. The company specializes in the fields of geology and geotechnics, providing critical services for various construction projects. Their core business involves conducting soil investigations and providing detailed geological analysis, which are essential components for ensuring the stability and safety of construction developments.

Analysis and implications of the incident

This incident may pose significant operational and reputational risks to SolGeo AG due to the potential exposure of sensitive corporate and personal data. Because the organization is a Swiss-based entity, this breach may trigger legal consequences under the Federal Act on Data Protection (FADP), which governs how personal data must be handled and protected within the country.

The 8base group is known for employing double-extortion tactics. In a double-extortion scenario, attackers do not just encrypt an organization's data to disrupt operations; they also steal sensitive information and threaten to leak it publicly to maximize their leverage. This method can facilitate secondary risks, such as identity theft and highly targeted phishing attacks, as the leaked data can be used to impersonate individuals or craft convincing fraudulent communications.

Given that the group's infrastructure was targeted in early 2025, it is possible that they are attempting to maintain operational continuity and visibility through such announcements. For organizations in the professional services sector, such incidents underscore the importance of robust cybersecurity frameworks. Common defensive steps often include implementing multi-factor authentication, maintaining regular offline backups, conducting regular security awareness training, and ensuring strict access controls to sensitive project and personal files to mitigate the impact of potential exfiltration.