Incident analysis
schnabel-eng.com was listed by Dispossessor ransomware, a group with 344 victims recorded in this database. The listing appeared on the group's leak site on April 19, 2024.
Sector context. Business services firms often have access to multiple client environments, making them high-value pivot points for ransomware operators seeking to maximise impact across multiple victim organisations.
Dispossessor typically follows a double extortion model: data is exfiltrated from the victim's systems before files are encrypted, so the victim faces two demands at once — pay to restore access, and pay to keep stolen data unpublished. The leak site, where this listing appeared, is the lever for the second demand.