- Ransomware Sarcoma operators recently violated Radix
- As a result, the Swiss government archives were published on the dark website
- Radix states that he retained intact backups
Multiple agencies of the Swiss federal government were affected by an attack of the supply chain that was reduced by Radix, a non -profit organization in the health promotion sector.
A brief announcement published on the Swiss government website said: “Several administrative units of the Federal Administration” were among Radix customers.
It was also more explained that the company fell prey to a cyber attack of ransomware in which the attackers stole and encrypted data before publishing it on the dark website. After the consequences, Radix notified the National Cyber Security Center (NCSC), which initiated an investigation to determine exactly what type of data was affected and who were the victims.
Sarcoma diagnosis
“As Radix does not have direct access to federal administration systems, the attackers did not get entry to these systems at any time,” the government explained.
Radix also issued a statement on his own website, detailing what had happened.
“Unfortunately, we must confirm that despite the high standards of safety and professional support, we have become victims of a cyber attack,” says the notification translated by machine. “On June 29, 2025, the Hacker group sarcoma published the stolen data in a filtration site.”
Radix also explained to the affected people have already been notified, and emphasized that the data of the associated organizations were not compromised.
“Access to the affected data was immediately revoked after the attack was discovered. There was a confirmed data leak, and several data were encrypted. However, Radix retains all the data in an intact state in the backup copies. The exact method of the attack is currently under investigation.”
To affirm that all the data were intact in the backups suggests that the company is not interested in paying the rescue demand. This would make sense, since the attackers supposedly already leaked the loot in the dark network.
Through Bleepingcomputer