selinerag.ch Listed by lockbit2 Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Breaking down the breach

The only confirmed public record is the appearance of selinerag.ch on the lockbit2 leak site. The entry asserts that files were removed from the organisation’s systems. No independent confirmation of the volume of data, the date of the intrusion, or the method of initial access has been released. The scale of any exposure to customers, employees or partners is therefore unknown.

Inside lockbit2

Lockbit2 is a ransomware operation that follows a double-extortion model. After encrypting systems, the group copies selected files and threatens to publish them unless a ransom is paid. Victims are listed on a dedicated site when negotiations fail or are refused. The group has published claims against organisations in multiple countries and sectors since its emergence, though each listing remains an unverified assertion by the operators until corroborated by the victim or investigators.

Who is selinerag.ch?

selinerag.ch is a Swiss organisation that maintains internal operational records in the course of its activities. Entities of this type routinely store administrative documents, correspondence, technical data and employee information required for day-to-day operations. A compromise of such records can affect both the organisation’s continuity and the privacy of individuals whose details appear in those files.

The information in question

The listing refers only to “internal files.” No inventory of specific document types, databases or personal data categories has been published. Organisations in this sector commonly hold records such as contracts, financial statements, project documentation and staff details, but the exact material removed in this case has not been confirmed.

What's at stake

Exposure of internal files can enable further targeted attacks against the organisation or its contacts. Individuals named in the documents may face risks of identity misuse or unsolicited contact if the material later circulates. The absence of confirmed data categories means the full scope of potential harm cannot yet be assessed.

What to do if you're exposed

Monitor official statements from selinerag.ch for any guidance on the incident. Review bank and email accounts for unusual activity and enable multi-factor authentication where available. Individuals can also run a free exposure scan of their email address against known breach data to determine whether their information has appeared in other public listings.

AICompiled with AI assistance from public sources and published under our editorial standards.