Das Team AG, a Basel-based staffing agency with roughly 25 branches across Switzerland and the Principality of Liechtenstein, was hit by a ransomware attack attributed to the Black Basta group. The company said the intrusion took place in December 2023 and that it had been able to restore its systems and all its data on its own, so it did not take up the attackers' invitation to ransom negotiations.
The scale of the data theft only became clear the following February. On February 21, 2024 the agency was alerted that files attributed to it had been published on Black Basta's dark web leak site. Swiss outlets reported the leak ran to roughly 200 gigabytes and included employee records, customer contracts, financial documents, internal company files, copies of identity papers and medical records.
Das Team AG acknowledged that it had underestimated the extent of the data loss during its initial December assessment. It said it recognised that the published material could put affected people at risk, and that it was working with external specialists to analyse the leaked documents while it identified and contacted the individuals concerned. The company also confirmed it was treating the incident as a priority and cooperating with law enforcement.
The agency reported the breach to Switzerland's Federal Data Protection and Information Commissioner and said it would submit a full account once its analysis was complete, as required under Swiss law.