Worldleaks claims to have breached CIM, a Germany-based real estate and infrastructure investment firm, deploying ransomware to encrypt systems and exfiltrate data. The claim emphasizes CIM’s diverse portfolio—hotels, retail, residential properties, and renewable energy infrastructure—and asserts that the attack would disrupt operations and affect stakeholders across Germany #Germany
Incident Details
- Victim: CIM
- Sector: Not Found
- Country: DE
- Actor: worldleaks
- Source: https://worldleaksartrjm3c6vasllvgacbi5u3mgzkluehrzhk2jz4taufuid.onion/companies/5682629549
- Discovered: 2026-03-27 19:08:17.474228
- Published: 2026-03-27 17:37:50.000000
Information
- Founded in 1994 as a community-focused, integrity-driven real estate and infrastructure investment firm
- Specializes in urban transitions and sustainable development
- Aims to uplift communities through strategic investments
- Asset portfolio includes hotels, retail, residential buildings, and renewable energy infrastructure
- Focuses on maximizing value for investors, the community, and the team

Disclaimer: This post is based on public claims made by the ransomware group "worldleaks". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.