Captured Sep 20, 2026

Touring Club Suisse

qilin

Ransomware leak-site victim intelligence · EN

Views

4,090

Posted

Sep 20, 2026

Country

Industry

Hospitality

Summary

Written by ThreatClusterfrom site fields, victim profile, leak post, screenshot

The leak post claims Touring Club Suisse is the victim and states the material has been published on the group’s leak site (publication status: published; posted 2026-09-20). The leak page lists the victim's domain as tcs.ch and sector as hospitality. It notes a QR code image and cites WikileaksV2 as a source; it does not specify what data was taken or how much.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains: www.tcs.ch

What was taken

Blog Touring Club Suisse

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

4090: Views
TOX: 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68
WikileaksV2: https://wikileaks2.com/
Sep 20, 2026: Page date
qr_code_image: QR Code
wikileaks_source: WikileaksV2 (https://wikileaks2.com/)
Blog Touring Club Suisse: Blog Touring Club Suisse
Company url (http://www.tcs.ch): http://www.tcs.ch
WikileaksV2 (https://wikileaks2.com/): https://wikileaks2.com/
(http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion): http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion

Leak-site images (2)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture

The image features a logo with a yellow background and a circular emblem that includes a blue and white design, along with a red shield.

onion leak page30 KB

Negotiation

Tox 7C35408411AEEBD53CDBCEBAB167D7B22F1E66614E89DFCB62EE835416F60E1BCD6995152B68

Onion http://pandora42btuwlldza4uthk4bssbtsv47y4t5at5mo4ke3h4nqveobyd.onion