Chèvre & Rutsch & Herren Notariatsbüro Listed by qilin Ransomware Group

On February 4, 2026, a Swiss notary firm known as Chèvre & Rutsch & Herren Notariatsbüro appeared on the public leak site of the qilin ransomware group. The attackers claim to have exfiltrated internal files from the firm’s systems and are using the listing to pressure the business for payment.

What's Publicly Reported from Reporting

Public reporting indicates the notary office was added to the qilin leak site on February 4, 2026. The group states it stole internal data during a ransomware incident. Exact volume and types of records have not been independently verified, but notary offices routinely hold highly sensitive personal information including wills, property deeds, marriage contracts, inheritance documents, and client identity records. No confirmed victim count for individuals whose data may have been taken has been released.

The listing follows the group’s standard pattern of publishing samples or threatening full disclosure if demands are not met. Available reporting describes the data as “internal files,” which in this professional context almost certainly includes documents that name private individuals and families across Switzerland and potentially abroad.

Why This Matters for You and Your Family

When a notary firm is breached, the people whose private legal and financial matters were stored there are the real victims. If your family has used this office for any transaction — buying a home, drafting a will, settling an estate, or handling a marriage or divorce — your personal data may now sit on a criminal server. Names, addresses, dates of birth, financial details, and family relationships are exactly the kind of information identity thieves and extortionists seek.

Even if you never directly hired this firm, notary records often reference third parties. A single leaked file can expose dozens of families at once. For ordinary people trying to protect their households, this incident is a reminder that professional service providers hold some of the most permanent and damaging personal data imaginable.

The Doxxing and Identity-Chain Risk

Ransomware leaks rarely stop at one company. Once internal files leave a notary office they can be cross-referenced with other stolen databases. A phone number listed in a property deed can be tied to an email from an earlier breach; that email can be linked to a username on a gaming platform or social account. These identity chains let attackers move from one leak to the next, building complete profiles that lead to doxxing, targeted phishing, or account takeovers.

Credential leaks like this one cascade into gaming accounts belonging to you or your children. A reused password or shared family email is all it takes for an attacker to seize a Roblox, Fortnite, or Steam account and then demand payment or threaten to release private chat logs. The same chain that starts with a notary breach can end with public humiliation or financial loss for any member of the household.

Qilin Ransomware Group’s Track Record

Public reporting attributes the attack to the qilin ransomware group. The group emerged in 2022 and has since targeted organizations across multiple countries. Notable prior victims include healthcare providers, manufacturers, and professional service firms. Their typical playbook involves gaining initial access through phishing or exploited remote desktop services, exfiltrating data before encrypting systems, and then publishing samples on their leak site when the victim refuses to pay. The group uses both double-extortion and occasional triple-extortion tactics, threatening to release data to clients, regulators, or the public.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, addresses, and online handles that may have been exposed in this or connected breaches.
• Rotate any password you have reused at the notary firm or any related service, then enable two-factor authentication through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information surfaces you learn within hours instead of months.
• Cover the household — DoxxScan family coverage extends to dependents and children’s gaming accounts that often chain back to the same family address or email.
• Let remediation specialists handle takedown requests across data brokers and leak sites for you while you focus on securing your own accounts.

The hard reality is that notary breaches expose information designed to last for decades. Acting quickly limits how far attackers can travel down the identity chain before you cut them off. Start your DoxxScan trial today and put continuous monitoring, AI-powered identity-chain mapping, and hands-on remediation specialists to work for your entire family, including gaming accounts that are increasingly part of these attack chains.