The J ransomware group claims to have breached Multi-media systeme AG (mmsag), a German company specializing in audiovisual and event technology. For over 30 years, mmsag has provided consultation, planning, installation, and maintenance of media technology for conference rooms, large venues, and public events.
According to the actor, a total of 187 GB of data was exfiltrated. The allegedly compromised data includes:
- Project documentation & proprietary code (Crestron, Biamp, Extron, Cisco, etc.)
- Client-specific project files (SAP, Rathaus Ettlingen, Hessischer Landtag, KIT, Siemens Mannheim, etc.)
- Commercial & financial records (invoices, delivery notes, contracts, credit reports)
- Employee personal & financial data (mobile bills, travel expenses, salary records, health docs)
- Legal & contractual documents (NDAs, service agreements, termination letters)
- Marketing & branding assets
- Internal business operations (weekly reports, vehicle logs, procurement)












