Compagnie des Guides de Chamonix Listed by radar Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Compagnie des Guides de Chamonix has been listed by the ransomware group known as radar, according to a report dated 15 August 2025. Public detail indicates that internal files were exfiltrated in a ransomware attack, though the number of people affected remains unknown and further technical specifics have not been disclosed.

The listing places the long-established mountain-guiding organisation on a threat actor’s leak site. Because the claim originates from the group itself, it should be treated as unverified until independently confirmed. The organisation’s published contact points—Chamonix Office +33 (0)4 50 53 00 88 at Maison de la montagne, 190 place de l’église, 74400 Chamonix, and Argentière Office +33 (0)4 50 54 17 94 at 24 Route du village, 74400 Argentière—appear in the same reporting summary.

Inside the incident

What is known so far is limited to the radar group’s listing of Compagnie des Guides de Chamonix and the statement that internal files were allegedly exfiltrated during a ransomware attack. No public confirmation has been issued regarding the precise date of intrusion, the initial access method, the volume of data taken, or whether encryption of systems also occurred. The number of individuals whose information may have been involved is recorded as unknown. Reporting simply notes the organisation’s two office addresses and telephone numbers in the Chamonix valley. In the absence of further official statements, the scale, duration and full technical pathway of the incident remain undisclosed.

Inside radar

Radar is a ransomware operation that has appeared on public leak sites in recent years. Like many such groups, it typically claims to steal data before or during encryption and then posts victim names to pressure organisations into paying a ransom. Public reporting on radar has described double-extortion tactics: exfiltration of files followed by threats of publication if demands are unmet. The group’s listings are claims made by the actors themselves; they do not constitute independent verification that a breach occurred or that every file advertised was in fact obtained. No statements attributed to radar beyond the mere listing of Compagnie des Guides de Chamonix are available in the present record, so any further assertions about this specific victim would be speculative.

Compagnie des Guides de Chamonix and its sector

Compagnie des Guides de Chamonix is one of the oldest and best-known mountain-guiding companies in the French Alps. It organises guided ascents, ski touring, climbing instruction and related mountain activities for clients ranging from recreational visitors to experienced alpinists. Organisations of this type routinely maintain records of clients, guides, employees, bookings, medical or fitness declarations, payment details and operational logistics. Because the work involves remote and sometimes high-risk environments, the company also holds safety-related documentation and emergency contact information. A breach affecting such an entity is consequential not only for the commercial reputation of a historic local institution but also for the privacy of people who have entrusted personal and sometimes sensitive details to it in order to participate in mountain activities.

The information in question

The available facts state only that internal files were exfiltrated. No inventory of specific data categories—such as names, contact details, financial records or medical information—has been publicly confirmed. Organisations that provide professional mountain guiding typically store client booking histories, identity documents required for high-altitude itineraries, emergency contacts, guide certifications, payroll and supplier contracts. Whether any of those categories were among the files taken in this case is unconfirmed. Readers should therefore treat the precise contents of the exfiltrated material as unknown until authoritative disclosure occurs.

Why it matters

Even when the exact data types remain undisclosed, the exfiltration of internal files creates concrete risks. Individuals whose details appear in those files may face phishing, social-engineering attempts or identity misuse if the material is later published or sold. For the organisation itself, operational disruption, regulatory scrutiny under European data-protection rules, and loss of client trust are realistic consequences. Because mountain-guiding companies often hold emergency and medical-related information, any unauthorised access raises particular concern for personal safety and privacy. The absence of a confirmed count of affected people does not reduce the need for vigilance among past and present clients, guides and staff.

What to do if you're exposed

If you have had dealings with Compagnie des Guides de Chamonix—whether as a client, guide or employee—consider the following practical steps:

• Monitor bank and credit-card statements for unfamiliar transactions and enable transaction alerts where available.
• Treat unsolicited emails, calls or messages that reference mountain trips, bookings or personal details with caution; verify any request through official channels before responding.
• Change passwords on accounts that may have shared credentials or recovery information linked to the company, and enable multi-factor authentication wherever possible.
• Request a free credit report or fraud alert from the relevant national consumer-protection or credit-monitoring body if you believe financial data could be involved.
• Run a free exposure scan of your email address against known breach data sets to check whether your information has already surfaced elsewhere.

Public detail on this incident remains limited. Continue to follow official statements from the company and from French data-protection authorities for any confirmed notifications or support measures.

AICompiled with AI assistance from public sources and published under our editorial standards.