Confirmed breach

Holcim data breach

CHSwitzerland

Ticinonline and frenchbreaches reported a data breach at Holcim (Switzerland) on 31 October 2026, and it has been confirmed.

People affected: Not reportedno count given yet
Reported: 31 October 2026News report and 2 more

What was exposed 1

Files

How it happened

How: Ransomware source
Attacker: emperador (claimed on its own leak site) source · All its claims, counted →

What changed since it was first reported

4 November 2026 Confirmed breach (Ticinonline)

Sources 3

News reportTicinonlineCyberattack on Holcim: 360 GB of data stolen, publication threatened (our translation from Italian)3 November 2026
Confirmed by Holcim: Holcim confirmed that it detected "limited and unauthorized access to data, as well as their theft"
Our translation from Italian
Holcim ha confermato di aver rilevato un «accesso limitato e non autorizzato ai dati, nonché il loro furto»
News reportfrenchbreachesCyberattack: Holcim, cement giant linked to Lafarge, confirms... (our translation from French)3 November 2026
Archived copy Wayback Machine, 4 November 2026
Confirmed by Holcim: Holcim confirms a cyberattack and a data breach
Our translation from French
Holcim confirme une cyberattaque et une fuite de données
Attackers’ claimransomware.live (emperador claim)emperador listed Holcim on its leak site31 October 2026
Archived copy Wayback Machine, 15 October 2026

News reports are read by an AI model; every fact taken from an article was checked word for word against it, and anything it could not find was dropped. An attackers’ claim is their own word and is not verified. · Corrections and changes

Questions about the Holcim breach

Was Holcim hacked?

Ticinonline and frenchbreaches reported a data breach at Holcim (Switzerland) on 31 October 2026, and it has been confirmed. How it happened, by the sources: ransomware.

What data was exposed in the Holcim breach?

Files, by the notices and reports on this page.

How do I know if I was affected?

Organisations normally tell the people whose data was involved, by letter or email, and that notice says what of yours was in it. We cannot look up individual people. If you got a notice, check that it is real, then follow the steps on this page.

Is there a Holcim data breach settlement?

No settlement open for claims is on record for Holcim as of 15 November 2026. Every open settlement is listed with its deadline.

Is a letter, email or text about the Holcim breach real or a scam?

A real notice names the breach, says what data was involved and never asks for a password, a code or a payment. Criminals often send fake notices after a breach is in the news. Do not use links or phone numbers in the message: go to Holcim’s own site, or check the letter here.

More breaches in Switzerland

Every breach in Switzerland →

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Accuracy audit · For journalists · Found a mistake? Tell us and we correct it.