Vennerhus Weine AG listed on RansomHouse leak site

• Ransomware group: RansomHouse
• Country: Switzerland
• Sector: Retail & E-Commerce
• Announcement date: November 12, 2025

RansomHouse claims attack on Vennerhus Weine AG

The RansomHouse ransomware group has published an announcement on its leak site targeting the Swiss-based organization Vennerhus Weine AG. According to the claim made by the threat actors, the group has successfully obtained data belonging to the company. This development follows a pattern of double extortion, a tactic where cybercriminals not only encrypt an organization's systems but also steal sensitive information to use as leverage during negotiations.

The threat actors allege that they gained unauthorized access to the company's internal systems on October 20, 2025. Following this initial access, the group posted a formal announcement on their leak site on November 12, 2025. In their communication, the group is threatening the company's management with the potential leaking or sale of the stolen data to third parties. The attackers are currently urging the organization's leadership to initiate contact to resolve the situation.

Details regarding the claimed data

At this stage of the incident, the specific nature and volume of the data involved remain unclear. The announcement provided by the RansomHouse group does not include specific information regarding the types of files or the categories of data that have been targeted. Furthermore, there is no information provided regarding the total size of the data or the specific count of files allegedly exfiltrated. While the leak site listing includes a screenshot displaying a download link for evidence packs, the actual content of these packs has not been detailed in the public announcement.

Affected data types

• No specific data types were named in the listing.

About Vennerhus Weine AG

Vennerhus Weine AG is a Swiss-based wine importer and distributor that has been in operation since 1994. The company specializes in the trade of high-quality wines and provides a variety of services to its clientele. In addition to its core trading activities, the company organizes professional wine tastings, specialized courses, and various events tailored for both private clients and corporate groups.

Analysis and potential implications

The actions taken by the RansomHouse group indicate that Vennerhus Weine AG may be facing a significant risk regarding the exposure of its corporate and customer data. Because the company is based in Switzerland, any confirmed data breach could lead to serious legal consequences under the Swiss Federal Act on Data Protection (FADP). The potential exposure of sensitive information poses secondary risks to the organization's customers and business partners, who may become targets for identity theft or highly targeted phishing attacks.

RansomHouse, a group that has been active since 2021, typically utilizes methods that focus heavily on data theft and extortion. Such attacks can result in substantial reputational damage to an organization and may lead to significant operational disruptions. For companies in the retail and e-commerce sectors, maintaining the integrity of customer databases is critical to maintaining trust and operational continuity.

To defend against such threats, organizations generally focus on strengthening their security posture through various defensive measures. These typically include implementing robust multi-factor authentication, maintaining rigorous patch management schedules, and conducting regular security awareness training for employees to recognize phishing attempts. Additionally, maintaining offline, encrypted backups and implementing strict network segmentation can help limit the movement of threat actors within a network and mitigate the impact of a successful intrusion.