ENB Versicherungen | myenb.ch Listed by payload Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

The incident involving enb AG was reported on June 20, 2026, when the ransomware group payload listed the Swiss insurance broker on its leak site under the heading ENB Versicherungen | myenb.ch. Public information states that internal files were exfiltrated during a ransomware attack, though the number of people affected remains unknown and no further details on the volume or contents of the data have been released.

Incidents of this type continue to affect organisations that hold personal and financial records, underscoring the ongoing risk that ransomware operators pose to sectors handling sensitive client information.

Breaking down the breach

The only confirmed detail is that payload listed enb AG on its site and asserted that internal files had been taken. No information has been made public about the date of the intrusion, the method of initial access, the duration of unauthorised activity, or the scale of the data removal. The number of individuals whose information may be involved is also undisclosed.

The group behind it: payload

Payload is a ransomware operator that maintains a public leak site where it lists organisations it claims to have compromised. Groups of this kind commonly employ double-extortion tactics, first encrypting systems and then threatening to publish stolen data unless a ransom is paid. Their listings represent claims made by the group itself; independent confirmation of the underlying incidents is not always available from public sources.

enb AG and its sector

enb AG operates as an independent insurance broker in Switzerland, working with multiple insurers to arrange coverage for private individuals and corporate clients. Its services include health, vehicle and liability insurance, as well as pension and collective accident schemes for businesses. Organisations in this sector routinely process personal identifiers, policy details, claims histories and financial information belonging to both customers and employees.

The information in question

The only description provided is that internal files were allegedly exfiltrated. No inventory of specific data categories has been released. Insurance brokers typically hold names, addresses, dates of birth, policy numbers, health-related information and payment details; however, whether any of these categories were among the files taken in this case remains unconfirmed.

Why it matters

Exposure of internal insurance records can lead to identity misuse, fraudulent claims or targeted social-engineering attempts against affected clients. For the organisation, the incident may result in regulatory scrutiny under Swiss data-protection rules and costs associated with investigation and remediation. Because the number of individuals involved is unknown, the full scope of potential impact cannot yet be assessed.

Were you affected?

Individuals concerned about possible exposure can monitor official communications from enb AG and review statements from their insurers. Running a free email-exposure scan against known breach datasets provides one practical step to check whether an address has appeared in previously published records. Any unusual activity on insurance or financial accounts should be reported directly to the relevant provider.

AICompiled with AI assistance from public sources and published under our editorial standards.