Ransomware Group: 8BASE

VICTIM NAME: SolGeo AG Baugelogie and Geotechnik

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the 8BASE Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page related to SolGeo AG, a consulting firm specializing in construction geology and geotechnics, was discovered on January 3, 2025. The company is headquartered in Solothurn, Switzerland, with additional branches in Liestal and Willisau. According to the leak, the group responsible for the breach is identified as 8base. Although no specific compromise date was noted, the leak surfaced shortly after the publication date of January 3, 2025. The firm is recognized for its innovative consulting services in the construction industry, which adds a layer of concern regarding the potential exposure of sensitive project data.

The leak page includes a screenshot of the internal documents, which adds credibility to the breach claim. While no personal identifiable information (PII) of employees or third parties was disclosed, the implications of such a breach in the construction sector could lead to vulnerabilities in ongoing projects and partnerships. The presence of a dedicated webpage on the dark web may suggest that the threat actors are leveraging this data for ransom demands. A total of zero employees or third parties were reported in connection with the extracted information. Additionally, while there are links related to the company’s website, the actual details of any downloads or the nature of the leaked documents remain unspecified to avoid exposure of sensitive content.