Cyber Incident Victim: Pictet
Date:
Jun 2025
Location:
Switzerland
Summary
A hacker attack on the procurement service provider Chain IQ, a former UBS spin‑off, exposed personal data of about 130 000 UBS employees, including the internal telephone number of CEO Sergio Ermotti. The attackers, linked to the ransomware group Worldleaks, said they took more than 1.9 million files totalling roughly 910 gigabytes and also published a separate file containing over 230 000 invoice entries from the Geneva bank Pictet, while noting that no customer information was included. Chain IQ reported the incident to authorities, warned affected business customers, and noted that nineteen other companies were also impacted.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
A ransomware attack attributed to the group Worldleaks targeted Chain IQ, the procurement service provider that originated as a UBS spin‑off, and was disclosed publicly last week. The attackers exfiltrated more than 1.9 million files amounting to roughly 910 gigabytes of data from the company’s systems. According to the report, the breach also impacted nineteen additional organizations alongside Chain IQ. The stolen data set includes a variety of internal documents and files.
Among the published material, the internal telephone number of UBS chief executive Sergio Ermotti was made available on the darknet, although Chain IQ clarified that the number cannot be dialed from outside the organization. The leak also contained a separate file with over 230 000 invoice positions belonging to the Geneva‑based bank Pictet, while the report explicitly states that no customer information was included in the disclosed data. The attackers’ disclosure affected roughly 130 000 UBS employees whose personal data were part of the exfiltrated set.
In response, Chain IQ notified the relevant authorities and alerted its business customers about the incident. The company, founded in 2013 as a UBS spin‑off and headquartered in Baar, operates additional offices in Europe, Asia and the United States. Besides UBS, its Swiss client roster includes Manor and Implenia. The firm has stated that it is cooperating with investigators and taking steps to secure its environment.