Swiss Utility Energie Netze Bern Hit by Payload Ransomware

A Swiss utility company responsible for electricity, gas, water, and district heating services for the city of Bern suffered a ransomware attack that resulted in 152GB of data being leaked by the Payload ransomware group.

Public reporting indicates that the incident targeted Energie Netze Bern, which operates under the domain myenb.ch. The Payload ransomware group added the organization to its leak site and claimed responsibility for exfiltrating 152 gigabytes of data. Available reporting describes the breach as occurring in June 2026, though the precise number of individuals affected and the exact categories of information exposed have not been confirmed by the company. Industry research from sources such as DoxxScan™ continuous monitoring indicates that utility-sector breaches frequently involve customer account details, billing information, contact records, and internal operational data that can be repurposed for identity theft.

This breach matters for you and your family because utility providers hold some of the most sensitive personal information: names, addresses, phone numbers, email accounts, payment details, and sometimes even banking references tied to monthly bills. When this data leaves a regulated European utility and appears on a ransomware leak site, it becomes freely available to identity thieves, phishing operators, and stalkers. A single exposed utility record can confirm where you live, who lives with you, and how to reach you — details that make every other piece of information about you far more dangerous.

The doxxing and identity-chain implications are particularly concerning. Ransomware groups like Payload do not simply post isolated files. They often release structured databases that allow criminals to connect your utility account to email addresses, phone numbers, and usernames used across other services. Once those links are established, attackers can follow the chain into social media, gaming platforms, shopping accounts, and financial services. A credential leak from your utility provider can therefore cascade into account takeovers on Steam, Roblox, or other gaming services used by your children, turning a household utility breach into a full-family doxxing incident.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real-world identity so you can see exactly what this breach has exposed.
• Rotate the password you used for myenb.ch anywhere else it is reused and switch on two-factor authentication through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1 billion+ breach records and more than 100 platforms so the next leak that touches your family is flagged within hours instead of months.
• Cover the entire household with DoxxScan family protection, which includes dependents and children's gaming accounts that often chain back to the same address or parent email.
• Let remediation specialists handle the follow-up work, including sending takedown requests to data brokers and monitoring for signs of misuse stemming from the 152GB Payload leak.

The lesson from the Energie Netze Bern incident is simple: data stolen in one breach rarely stays isolated. Start your DoxxScan trial today and combine continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that explicitly protects children's gaming accounts. DoxxScan by GalaxyWarden gives you and your family an active defense against the cascading threats that follow utility breaches like this one.