dmschweiz.ch Listed by m3rx Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
dmschweiz.ch has been listed by the m3rx ransomware group, with internal files reported exfiltrated. The listing was disclosed on 29 April 2026; an undisclosed number of people may be affected, so check any accounts or services linked to the organisation and change passwords or enable additional security measures if appropriate.
The listing of dmschweiz.ch by the m3rx ransomware group indicates that internal files were taken from the organisation. The number of individuals potentially affected remains unknown, and the precise contents of the material have not been independently verified. For anyone whose personal or business information may have been held by the Swiss company, the incident raises the possibility that data could be published or misused.
What happened
On 29 April 2026 the m3rx group listed dmschweiz.ch on its leak site. The group states that 120 GB of data comprising roughly 100 000 files were removed. Public reporting describes the material as internal files taken during a ransomware incident. No further details on the timing of the intrusion, the method of access, or any ransom demand have been disclosed.
The group behind it: m3rx
m3rx is a ransomware operation that maintains a public leak site to pressure victims. The group typically claims to have exfiltrated data before encrypting systems and then publishes samples or full archives when negotiations fail. Its listings are presented by the group itself; independent confirmation of the data’s authenticity or scope is not provided in the current case.
Who is dmschweiz.ch?
dmschweiz.ch operates in Switzerland and offers installed, ready-to-use devices that can be customised to customer requirements. Its standard installations are described as optimised and free of manufacturer advertising. Organisations of this type routinely store customer records, order details, configuration data and internal operational documents.
The information in question
The only confirmed description is that internal files were removed. The exact categories of data—such as customer names, addresses, payment information or technical configurations—have not been published. While companies in this sector commonly hold such records, the specific contents of the 120 GB archive remain unconfirmed.
The real-world impact
Individuals whose details appear in the files could face risks of targeted phishing, identity misuse or unwanted disclosure of private arrangements. The organisation itself may encounter operational disruption, regulatory scrutiny under Swiss data-protection rules and loss of customer trust. Because the scale of personal data involved is still unknown, the full extent of these consequences cannot yet be assessed.
Were you affected?
Check any recent correspondence from dmschweiz.ch for direct notification. Review bank and email accounts for unusual activity. A free exposure scan of your email address against known breach repositories can indicate whether your information has appeared in previously published data sets; repeat such checks periodically as new leaks are added.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
fasadeconsult.no Listed by m3rx Ransomware Grouphbexperts-conseils.ca Listed by m3rx Ransomware Groupsuppcenter.global / suppcentersa.com Listed by m3rx Ransomware Groupemtco.com Listed by m3rx Ransomware GroupLatest breaches
Read GalaxyWarden’s full analysis of the dmschweiz.ch Listed by m3rx Ransomware Group →
Publicly posted by m3rx — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.