Mabetex Group
Attack Intelligence
Mabetex Group was compromised in a ransomware attack attributed to akira in April 2026. The organization, operating in the Construction sector in Switzerland, was added to the group's data leak site as part of an extortion campaign.
akira operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
Mabetex Group has established itself as a leader in design, const ruction and project engineering of administrative and governmenta l buildings as well as buildings in the health, sport and tourism sector, like hospitals, stadiums, hotels. We will upload 42gb of corporate data soon. Employee files (passp orts and other docs), lots of documents about international proje cts, detailed financials, client information, etc.