Adore UAE targeted by Bqtlock ransomware group

• Ransomware group: Bqtlock
• Country: United Arab Emirates
• Sector: Retail & E-Commerce
• Announcement date: October 11, 2025

The Bqtlock ransomware group has published an announcement on its leak site claiming that the systems of Adore UAE have been encrypted. This development follows a claim that the attack occurred on October 11, 2025, with the official announcement appearing on the group's platform on the same date.

The details of the claim

According to the threat actor known as Bqtlock, the organization Adore UAE has been added to its list of victims. The group claims that all servers and data belonging to the institution have been encrypted as part of this cyberattack. In exchange for the decryption keys required to restore access to the encrypted systems, the threat actor is demanding a ransom of 66 XMR.

Ransomware attacks of this nature often involve a process where attackers gain unauthorized access to a network and deploy malicious software to lock the victim's files. Once the encryption is complete, the attackers use a dedicated leak site to pressure the organization into paying the demanded cryptocurrency. This method is a common tactic used by various ransomware groups to maximize their leverage over a target.

Data and encryption details

Regarding the specific content of the incident, the threat actor has not shared any specific details regarding the content of the leaked or encrypted data. The announcement is limited to the claim that all servers and data belonging to the institution have been encrypted. The listing names no specific data types that have been compromised.

In many modern ransomware incidents, threat actors employ a tactic known as double extortion. This involves not only encrypting the victim's data to disrupt operations but also stealing sensitive information to threaten a public leak if the ransom is not paid. While the current claim focuses on the encryption of all servers and data, the potential for data exfiltration remains a significant concern in such scenarios.

About Adore UAE

Adore UAE is a retail and e-commerce company based in the United Arab Emirates. The organization operates an online platform that sells various consumer products to its customer base.

Impact and organizational considerations

This incident may lead to a disruption of operational continuity within Adore UAE. The encryption of data could prevent the institution from accessing customer and commercial information, causing significant business interruptions. Such disruptions can affect the ability of an e-commerce entity to process orders, manage inventory, or communicate with its clients.

There are several critical risks associated with this type of event:

• There is no guarantee that paying the ransom will result in the recovery of the data.
• Taking the action of paying a ransom may facilitate secondary extortion attempts by the same or different threat actors.
• In the event of a data leak, the exposure of customer information could lead to legal liabilities under UAE data protection regulations.

For organizations operating in the retail and e-commerce sectors, maintaining robust cybersecurity postures is essential. Common defensive steps often include implementing regular, offline backups of all critical data to ensure recovery without paying a ransom. Additionally, organizations typically focus on network segmentation to prevent the lateral movement of attackers and the use of multi-factor authentication to protect access to sensitive systems. Because information about the Bqtlock group is limited in the public domain, organizations should remain vigilant against their specific tactics and techniques.