On January 16, 2024, Swiss telecommunications software provider Nexus Telecom Switzerland AG appeared on the leak site operated by the 8base ransomware group. The listing states that internal files were exfiltrated during a ransomware attack. The company, which supplies network monitoring, VoIP, VoLTE, IMS service assurance and customer-experience platforms to telecom operators worldwide, has not yet published a public breach notification detailing the volume or exact nature of the data taken.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Not ready yet? Run a free breach check on this email
We’ll check it against 13.1B+ leaked records right now — no account needed. Continuous monitoring & alerts are part of Protection.
Reported Details from the Listing
The 8base leak-site entry, still accessible via the onion address tracked by ransomware.live, claims successful data exfiltration from Nexus Telecom’s internal systems. It does not specify the number of records involved, the precise file types exposed, or any ransom demand. The disclosure indicates that the data remains available for download to authorized parties on the extortion platform, a standard practice for this group when victims do not pay. No customer list, contract database size, or employee record count is provided in the primary listing.
Why This Matters for You and Your Family
Even though Nexus Telecom primarily serves business clients, its systems routinely handle detailed operational records that can include partner contact information, billing identifiers, support tickets and, in many cases, indirect personal data of end users whose telecom services rely on the company’s monitoring and assurance platforms. If your mobile carrier, VoIP provider or enterprise network operator uses Nexus Telecom software, your phone number, service address, account reference or support history may have been caught in the exfiltrated files. Unknown record counts make it impossible to know how many individuals are ultimately affected, which is why treating the incident as potentially relevant to your household is the safest stance.
The Doxxing and Identity-Chain Risks
Ransomware leaks of this kind frequently expose spreadsheets, configuration files and customer relationship management exports that link email addresses, phone numbers, internal usernames and sometimes physical addresses. Once published on a dark-web leak site, these fragments become building blocks for larger identity chains. Threat actors combine them with other breaches to map your online handles to real-world identity, then target linked accounts for takeover. Gaming accounts belonging to you or your children are especially vulnerable because the same email or password reused for a telecom support ticket can unlock Steam, Roblox, Discord or Epic profiles, leading to further doxxing, swatting risks or financial fraud. The longer the data sits on the 8base site, the higher the chance it will be scraped and sold on additional underground markets.