Tscherne Consulting Steuerberatung GmbH

Tscherne Consulting Steuerberatung GmbH was compromised in a ransomware attack attributed to payload in April 2026. The organization, operating in the Financial Services sector in Austria, was added to the group's data leak site as part of an extortion campaign.

payload operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Tscherne Consulting Steuerberatung GmbH is an Austrian tax consulting firm based in Graz. The company specializes in services for small and medium-sized businesses, including bookkeeping, tax planning, payroll processing, and business consulting.