Tscherne Consulting Steuerberatung GmbH, an Austrian tax consulting firm based in Graz, was targeted by a ransomware incident in which the payload was identified as the threat actor. The firm provides bookkeeping, tax planning, payroll processing, and business consulting for small and medium-sized businesses #Austria
Incident Details
- Victim: Tscherne Consulting Steuerberatung GmbH
- Sector: Financial Services
- Country: AT
- Actor: payload
- Source: http://payloadrz5yw227brtbvdqpnlhq3rdcdekdnn3rgucbcdeawq2v6vuyd.onion/posts/f09e43ac-79b7-4cf1-bcd8-93d6f27b6436
- Discovered: 2026-04-03 01:05:42.261895
- Published: 2026-04-03 01:05:12.416598
Information
- Tscherne Consulting Steuerberatung GmbH — Austrian tax consulting firm based in Graz.
- Provides services for small and medium-sized businesses, including bookkeeping, tax planning, payroll processing, and business consulting.
- Ransomware incident attributed to actor “payload”.
- Country: AT (Austria).

Disclaimer: This post is based on public claims made by the ransomware group "payload". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.