A Swiss utility company responsible for electricity, gas, water, and district heating services for the city of Bern suffered a ransomware attack that resulted in 152GB of data being leaked by the Payload ransomware group.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch Energie Netze Bern
Get alerted the next time Energie Netze Bern files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about Energie Netze Bern’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Public reporting indicates that the incident targeted Energie Netze Bern, which operates under the domain myenb.ch. The Payload ransomware group added the organization to its leak site and claimed responsibility for exfiltrating 152 gigabytes of data. Available reporting describes the breach as occurring in June 2026, though the precise number of individuals affected and the exact categories of information exposed have not been confirmed by the company. Industry research from sources such as DoxxScan™ continuous monitoring indicates that utility-sector breaches frequently involve customer account details, billing information, contact records, and internal operational data that can be repurposed for identity theft.
This breach matters for you and your family because utility providers hold some of the most sensitive personal information: names, addresses, phone numbers, email accounts, payment details, and sometimes even banking references tied to monthly bills. When this data leaves a regulated European utility and appears on a ransomware leak site, it becomes freely available to identity thieves, phishing operators, and stalkers. A single exposed utility record can confirm where you live, who lives with you, and how to reach you — details that make every other piece of information about you far more dangerous.
The doxxing and identity-chain implications are particularly concerning. Ransomware groups like Payload do not simply post isolated files. They often release structured databases that allow criminals to connect your utility account to email addresses, phone numbers, and usernames used across other services. Once those links are established, attackers can follow the chain into social media, gaming platforms, shopping accounts, and financial services. A credential leak from your utility provider can therefore cascade into account takeovers on Steam, Roblox, or other gaming services used by your children, turning a household utility breach into a full-family doxxing incident.