TORMAX listed on losttrust ransomware leak site

• Ransomware group: losttrust
• Country: Switzerland
• Sector: Manufacturing
• Announcement date: September 26, 2023

Losttrust claims attack on TORMAX

The ransomware group known as losttrust has officially listed the Swiss-based organization TORMAX on its leak site. According to the announcement made on September 26, 2023, the threat actor claims to have targeted the company, alleging that data belonging to the organization has been compromised during the attack.

In modern cyberattack methodologies, ransomware groups often utilize leak sites to exert pressure on their victims. This practice is a core component of double extortion tactics, where attackers not only encrypt an organization's internal systems but also threaten to publish sensitive information publicly if a ransom is not met. By listing a company on such a site, the threat actor aims to damage the victim's reputation and create urgency through the threat of public exposure.

While the listing is a significant development, it is important to note that the threat actor has not provided any screenshots or concrete evidence to substantiate the claims made in the post. Consequently, the actual content and validity of the alleged leak remain unverified at this stage.

Details regarding the alleged data breach

Regarding the specifics of the incident, the information provided by the threat actor remains extremely limited. The announcement does not specify the nature of the data that has allegedly been compromised, nor does it provide details regarding the volume of files or the total size of the data involved. Furthermore, no ransom demand has been publicized in relation to this specific listing.

The listing names no specific data types that have been affected by the alleged breach.

About TORMAX

TORMAX is a global company that specializes in the design and manufacturing of automatic door systems. Operating as a division of the LANDERT Group, the company has a long-standing history in the industry, having installed Europe's first automatic door in 1951. Today, the organization provides automated solutions worldwide for a wide variety of structures, including airports, hotels, and office buildings.

Potential risks and industry implications

This incident suggests that the organization may face the risk of exposure involving sensitive information, such as employee data or trade secrets. Because TORMAX is a Switzerland-based company, a confirmed data breach could trigger significant legal obligations under the Swiss Federal Act on Data Protection (FADP) and the General Data Protection Regulation (GDPR).

Beyond the immediate legal and regulatory concerns, secondary risks may arise for the organization's customers and its broader supply chain. Such exposure can potentially facilitate targeted phishing attacks against stakeholders. If the claims made by the threat actor are eventually verified, the organization could experience significant operational disruptions and reputational damage.

For organizations operating in the manufacturing sector, maintaining robust cybersecurity defenses is critical to protecting intellectual property and supply chain integrity. Common defensive strategies often include implementing multi-factor authentication, maintaining rigorous patch management schedules, and conducting regular employee awareness training to mitigate the risk of initial access through phishing. As public information regarding the losttrust group remains limited, organizations should remain vigilant against the evolving tactics used by such threat actors.