Schaltbau

Schaltbau was compromised in a ransomware attack attributed to akira in March 2026. The organization, operating in the Manufacturing sector in Germany, was added to the group's data leak site as part of an extortion campaign.

akira operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

Schaltbau develops and manufactures electromechanical components and innovative driver's desks for railways and industry. Since 19 29, the company has been responsible for the safe operation of ra il services, and today the company protect systems in industrial applications for renewable energy, e-mobility, and automation. We will upload 20gb of corporate data soon. Employee passports an d other personal docs scans, lots of projects, specifications, co ntracts, internal confidential files, clients docs and so on.