Ixa Systems

About the organisation

ixasystems.ch rocketreach.co/ixa-systems-sa-profile_b40f7faaffd19ede Ixa Systems SA is a Swiss security systems company founded in 2007, headquartered in Crissier (canton Vaud, near Lausanne). A small family-run firm of ~9–10 staff with revenue of about CHF 3.5 million, it designs and integrates surveillance solutions: video surveillance (IP/CCTV), anti-intrusion systems, intercom, access control, perimeter detection, technical building supervision (GTC) and evacuation PA systems. Since 1 April 2022 it has been majority-owned by the D.E.S Systèmes de sécurité SA group, with Marc Barraud as director. Its clients include police, banks, museums, schools, hospitals, prisons and railways, and it offers 24/7 maintenance contracts.

ShellCodeX evidence assessment

Strong record · 85/100. Strong record completeness based on identity, context and retained source evidence. This score does not verify the attacker's allegation.

• A plausible organisation domain is attached to the claim.
• The record includes organisation-specific context rather than only a victim name.
• Country attribution is available for geographic context.
• Sector classification supports peer-risk comparison.
• A source listing reference is retained for traceability.

What the listing means

Ixa Systems appeared on the thegentlemen leak site on 30 August 2026. Groups publish a victim once negotiations stall or as pressure during them, so a listing usually means data was already exfiltrated — the attack itself is dated 28 August 2026, 1 day before the listing. This group has published 139 claims in the last 30 days and remains active.

Recommended actions

• Treat any unsolicited message referencing Ixa Systems as suspicious — leaked data gets weaponised for phishing within days.
• If you hold an account on ixasystems.ch, change that password now, update it anywhere you reused it, and enable two-factor authentication.
• Other Technology organisations should review this group's known TTPs and validate detection coverage against them.
• Watch for follow-on extortion: stolen data is often re-leaked or resold after the initial listing.
• A leak-site listing is a claim made by the attacker, not a confirmed breach — check the organisation's own disclosures before acting on it.

Leak-site evidence

Listing URL https://www.ransomware.live/id/SXhhIFN5c3RlbXNAdGhlZ2VudGxlbWVu