Ransomware (extortion): Production and industrial SMEs, Switzerland 2026
On 9 October 2026, a ransomware attack impaired individual systems of Medienwerkstatt in Sulgen; the attackers copied business contact data, production and order data as well as image files.
- Incident · 10.2026 · Sulgen TG, Switzerland
- Evidence: confirmed by an authority
- Ransomware (extortion)
- Data breach
As of
What happened
The systems were restored using backups, production ran normally and the customers affected were informed. According to Hacksnack, Akira claims responsibility with supposedly 130 gigabytes; the company made no concessions.
- Affected
- Medienwerkstatt (Mattenbach Group)
- Industry
- Production and industrial SMEs
- Loss
- no reliable figure
- Business interruption
- unknown
- Ransom demanded / paid
- unknown / no
- Data affected
- Business contact data, production and order data, image files of some of the customers
- Bankruptcy
- no
- Entry point
- not stated in the sources
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
Help and negotiation; only some insurers pay the ransom, see note
Mostly add-on 6 of 9 business products cover it fully, as an add-on or with limits.
-
Costs of getting data, software and systems running again
Mostly covered 6 of 9 business products cover it fully, as an add-on or with limits.
-
Letters, call centre, credit monitoring
Mostly covered 6 of 9 business products cover it fully, as an add-on or with limits.
-
Immediate help in an emergency
Hotline, IT forensics, crisis PR and legal advice
Mostly covered 7 of 9 business products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
Good backups bring production back quickly, but not the copied customer data.
Sources
- Medienwerkstatt meldet Datenabfluss (opens in a new window) Netzwoche · 26.10.2026
«Zugeständnisse an die Angreifer kamen für uns nicht infrage.»