On Sunday 29 March 2026 the Iran-linked hacking group Pay2Key encrypted and paralysed the IT systems of Haepo Tire Center in Winterthur using ransomware, also destroying backups. The incident has caused daily losses of several tens of thousands of Swiss francs and the loss of current accounting data; Haepo has informed police and its insurer and the management does not plan to pay the demanded ransom for now. #Pay2Key #HaepoTireCenter
Information
- Victim: Haepo Tire Center
- Website: haepo.ch
- Country: Switzerland
- Date Reported: 2026-03-29
Keypoints
- On 29 March 2026 the Iran-linked group Pay2Key deployed ransomware to encrypt and paralyse Haepo Tire Center’s IT systems.
- Backups were also destroyed, preventing recovery from existing copies.
- The company is incurring daily damages of several tens of thousands of Swiss francs.
- Current accounting data have been lost as a result of the attack.
- Haepo notified local police and alerted its insurer about the incident.
- Company management currently does not intend to pay the ransom demand.
- Haepo Tire Center is located in Winterthur; its website is haepo.ch.