SolGeo AG Baugelogie and Geotechnik Listed by 8base Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware groups continue to target professional services firms across Europe, using data theft and public leak-site listings as leverage even when the full scope of an incident remains unclear. In this environment, the appearance of a specialised Swiss consulting company on a known ransomware group’s site is a reminder that organisations handling technical project data and client records remain attractive targets.

On 3 January 2025 it was reported that SolGeo AG Baugelogie and Geotechnik had been listed by the 8base ransomware group. Public detail is limited: the number of people affected is unknown, and the only description of the material involved is that internal files were allegedly exfiltrated in a ransomware attack. The listing itself is a claim by the group; independent confirmation of the full extent of the incident has not been provided in the available record.

Breaking down the breach

According to the reported information, SolGeo AG Baugelogie and Geotechnik was listed by 8base on or around 3 January 2025. The group asserts that internal files were taken during a ransomware attack. No public figures have been given for the volume of data, the number of systems involved, the precise date of intrusion, or the method of initial access. The number of individuals whose information may have been affected remains unknown. Because these core details have not been disclosed, the incident can be described only in the terms supplied by the listing and the accompanying summary: a ransomware event that included exfiltration of internal files, followed by a public claim on the group’s leak site.

Who is 8base?

8base is a ransomware operation that has been active for several years and is known for double-extortion tactics. The group typically encrypts systems, steals data, and then publishes victim names on a dedicated leak site if a ransom is not paid. Public reporting on 8base has documented its use of standard ransomware toolkits, affiliate-style recruitment of operators, and a focus on mid-sized organisations whose operational continuity and reputation make them sensitive to data exposure. The group’s listings are claims; they do not by themselves prove that every asserted file was successfully stolen or that every named organisation suffered the full impact described. In the present case, the only verified public statement is that SolGeo appears on the 8base site with a reference to exfiltrated internal files.

Who is SolGeo AG Baugelogie and Geotechnik?

SolGeo AG Baugelogie and Geotechnik is a Swiss consulting firm specialising in engineering geology and geotechnics. It maintains its headquarters in Solothurn and operates branches in Liestal (Basel-Landschaft) and Willisau. Firms of this type advise on ground conditions, foundation design, slope stability, and related technical questions for construction and infrastructure projects. They routinely hold project documentation, site investigation reports, client correspondence, and sometimes personal data of employees or project contacts. A breach at such an organisation can therefore affect both commercial confidentiality and the privacy of individuals connected to those projects. The firm’s established presence in the Swiss market means that any confirmed exposure of its internal files would carry consequences for clients, partners and staff who rely on the integrity of that information.

The information in question

The available record states only that internal files were exfiltrated. No inventory of file types, no count of records, and no confirmation of whether personal data, financial data or technical drawings were included has been released. Organisations engaged in geotechnical consulting typically store geological reports, laboratory results, client contracts, employee records and project correspondence. Whether any of those categories were among the files claimed by 8base remains unconfirmed. Readers should therefore treat the precise contents of the alleged data set as unknown until official statements or independent verification become available.

The real-world impact

For individuals whose details may have been present in the internal files, the practical risks include potential misuse of contact information, identity-related fraud if personal identifiers were stored, or unwanted approaches by third parties who obtain the material. For SolGeo itself, the consequences can include disruption of ongoing projects, loss of client confidence, regulatory notification obligations under Swiss data-protection law, and the cost of forensic investigation and system recovery. Because the scale of the incident is undisclosed, the actual number of people or projects affected cannot be quantified from public sources. The listing alone does not establish that every claimed file has been published or widely circulated; it does, however, create a credible basis for heightened vigilance among anyone who has done business with the firm or worked on its projects.

If your data was in this claimed breach

If you have reason to believe your information may have been held by SolGeo AG, begin by monitoring financial and email accounts for unusual activity and consider placing fraud alerts with credit-reference agencies where appropriate. Change passwords on any accounts that reused credentials associated with the firm, and enable multi-factor authentication wherever it is offered. Keep records of any suspicious contact that appears to reference SolGeo projects or staff. Readers can also run a free exposure scan of their email address to check whether that address has already appeared in known breach data sets; such a scan provides an early indication of wider exposure even when the exact contents of a single incident remain unconfirmed. Official updates from the company or from Swiss authorities should be followed for any further verified details.

AICompiled with AI assistance from public sources and published under our editorial standards.