ADULLACT listed on fog ransomware leak site claiming GitLab data breach

• Ransomware group: fog
• Country: France
• Sector: Technology
• Announcement date: February 13, 2025

French association ADULLACT targeted by fog ransomware group

The French association ADULLACT has been listed on the leak site of a threat actor known as fog. According to the announcement made by the group, the organization's GitLab data has been compromised. This development follows a pattern often seen in modern cyberattacks where threat actors target specific repositories to gain leverage over an organization.

Claims of unauthorized access to digital assets

On February 13, 2025, the fog group published a post on their leak site listing ADULLACT as a victim. In the announcement, the group asserts that they have successfully gained access to the organization's digital assets. The group claims to have obtained data specifically related to the organization's GitLab environment.

The announcement suggests that the breach may involve information related to the organization's software development processes. While the group has claimed to have accessed these assets, the specific circumstances surrounding the initial entry into the network remain unconfirmed. In many such instances, ransomware groups utilize a double extortion tactic, where they not only encrypt an organization's systems but also threaten to leak sensitive data on public forums to pressure the victim into paying a ransom.

Details regarding the leaked information

The announcement specifies that GitLab data has been leaked; however, the group has not provided a detailed breakdown of the actual content contained within the leaked files. Furthermore, the information provided by the threat actor is limited in scope. There is no specific information provided regarding the total size of the data or the exact types of files that were exfiltrated. The screenshot associated with the claim does not contain any details regarding the volume of the data or the specific nature of the compromised files.

About ADULLACT

ADULLACT is a French association dedicated to the development and promotion of free software solutions. The organization focuses on serving local authorities and public administrations. By carrying out various open-source projects, the association contributes significantly to the digital transformation of public institutions through the implementation of open-source technologies.

Potential risks and security implications

This incident may bring the risk of exposure for source code or sensitive configuration information used in the organization's software development processes. The leakage of such data could potentially lead to security vulnerabilities in the software developed by the organization and may pave the way for supply chain attacks. When source code or configuration files are exposed, it can provide attackers with a roadmap of an organization's internal architecture, potentially allowing them to find further vulnerabilities.

As the organization is based in France, the incident may be subject to data protection assessments under the General Data Protection Regulation (GDPR). Because information about the fog group is limited, their specific motivations and subsequent actions remain uncertain. For organizations in the technology and software development sectors, maintaining robust security posture is essential to mitigate these risks. Common defensive steps include implementing strict access controls for version control systems, utilizing multi-factor authentication, and conducting regular audits of software repositories to ensure that no sensitive credentials or configuration data are inadvertently stored in the code.