Ransomware

********rta.ch

Location not known1 source

ClaimedCloak says it has data from ********rta.ch. ********rta.ch has not confirmed it. No confirmation after 26 days.

See it on the live map Am I affected?

Location not known.

Records affected: 87 GB, claimed by the attackers
Claimed by: Cloak
First reported: 18 Oct 2026
Latest source: 18 Oct 2026

What is known

Confirmed

No confirmed figure

Claimed

87 GB

Claimed by Cloak. Not verified.

Data involved

Data types not stated

Cause

Cause not stated

Claimed: 18 Oct 2026
First seen by Black Shard: 9 Nov 2026

Sources

Leak-site claim by Cloak, tracked by RansomLook18 Oct 2026Listed on Cloak's leak site.

Status timeline

18 Oct 2026
Leak-site claim by Cloak, tracked by RansomLook
18 Oct 2026
Status: claimed

Attacker group

Cloak
Claimed by the group on its leak site, 18 Oct 2026.

What to do

This is only a claim by the attackers so far. There is no need to panic, but the basics are worth doing.

Expect delays if you rely on this organisation's services, and keep records of anything you are owed.
If you have an account, change that password, and anywhere you reused it.

Talk to our team 24/7 incident line: 1800 370 270

How sure we are

That it happened as stated 10%

The place 0%

1 independent source. Location not known.

Not known yet

Attack dateData involvedA statement from the organisation

Update log

9 Nov 2026First seen.

Under attack? Call the incident line.

Black Shard's team can check your exposure, take a fix off your plate or step in on a live incident.

Talk to our team Breach response

24/7 incident line1800 370 270Call first, then work through the first-hour steps.

Ransomware

********rta.ch

Location not known1 source

ClaimedCloak says it has data from ********rta.ch. ********rta.ch has not confirmed it. No confirmation after 26 days.

See it on the live map Am I affected?

Location not known.

Records affected: 87 GB, claimed by the attackers
Claimed by: Cloak
First reported: 18 Oct 2026
Latest source: 18 Oct 2026

What is known

Confirmed

No confirmed figure

Claimed

87 GB

Claimed by Cloak. Not verified.

Data involved

Data types not stated

Cause

Cause not stated

Claimed: 18 Oct 2026
First seen by Black Shard: 9 Nov 2026

Sources

Leak-site claim by Cloak, tracked by RansomLook18 Oct 2026Listed on Cloak's leak site.

Status timeline

18 Oct 2026
Leak-site claim by Cloak, tracked by RansomLook
18 Oct 2026
Status: claimed

Attacker group

Cloak
Claimed by the group on its leak site, 18 Oct 2026.

What to do

This is only a claim by the attackers so far. There is no need to panic, but the basics are worth doing.

Expect delays if you rely on this organisation's services, and keep records of anything you are owed.
If you have an account, change that password, and anywhere you reused it.

Talk to our team 24/7 incident line: 1800 370 270

How sure we are

That it happened as stated 10%

The place 0%

1 independent source. Location not known.

Not known yet

Attack dateData involvedA statement from the organisation

Update log

9 Nov 2026First seen.

Under attack? Call the incident line.

Black Shard's team can check your exposure, take a fix off your plate or step in on a live incident.

Talk to our team Breach response

24/7 incident line1800 370 270Call first, then work through the first-hour steps.

What is known

Sources

Status timeline

Attacker group

What to do

How sure we are

Update log

Other incidents linked to Cloak

Under attack? Call the incident line.

What is known

Sources

Status timeline

Attacker group

What to do

How sure we are

Update log

Other incidents linked to Cloak

Under attack? Call the incident line.