INP Schweiz Listed by akira Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

In the current threat landscape, ransomware groups continue to target organizations that support critical infrastructure, including those in the energy sector. On March 20, 2026, INP Schweiz appeared on a listing associated with the Akira group. The available information states that internal files were exfiltrated during a ransomware attack, though the number of people affected and the precise circumstances of the incident remain undisclosed.

Inside the incident

The incident centers on a listing of INP Schweiz by the Akira group. The group claims it will upload 9 GB of corporate data. No official confirmation of the data volume or its contents has been provided by the organization. Details on the date of the intrusion, the initial access method, and whether encryption occurred alongside exfiltration are not publicly reported. The scale of impact on individuals is listed as unknown.

The group behind it: akira

Akira is a ransomware operation that has been publicly active since early 2023. The group is known for using double-extortion tactics, in which data is both encrypted on victim systems and copied for potential release. It has been documented targeting organizations across multiple countries and industries, often listing victims on a dedicated site when ransom demands are not met. In this case, the listing of INP Schweiz constitutes the group’s claim of possession of the data; independent verification of the claim has not been established in available reporting.

INP Schweiz and its sector

INP Schweiz AG provides engineering services to companies in the energy generation and transmission sector. Its work includes concept development, planning, commissioning, and testing. Organizations of this type routinely handle technical documentation, project records, and communications with equipment manufacturers and utility operators. A compromise at such a firm can affect not only its own operations but also the broader supply chain that supports energy infrastructure.

The information in question

The facts state that internal files were exfiltrated. The exact categories of data involved have not been confirmed by the organization. The group’s listing refers to employee personal information, HR files, financial records, client files, and contracts. These descriptions remain claims until corroborated by INP Schweiz or independent investigation.

Why it matters

For individuals whose information appears in the exfiltrated files, the primary risks involve potential misuse of personal identifiers and employment records. For the organization and its clients, exposure of contracts and technical materials could reveal operational details or commercial arrangements. Because the energy sector relies on specialized engineering partners, any prolonged uncertainty about data handling can complicate regulatory compliance and incident response efforts.

Were you affected?

Individuals can begin by monitoring official statements from INP Schweiz for guidance on notification or support. Practical first steps include reviewing bank and credit accounts for unusual activity and considering credit monitoring services where available. Readers can run a free exposure scan of their email address against known breach data to check for prior appearances in public records.

• Review personal financial statements regularly.
• Enable multi-factor authentication on accounts that store personal data.
• Contact INP Schweiz directly if employment or contractual records may be involved.

AICompiled with AI assistance from public sources and published under our editorial standards.