Aeonsparx listed in data leak announcement by fog ransomware group

• Ransomware group: fog
• Country: Malaysia
• Sector: Technology
• Announcement date: March 6, 2025

Aeonsparx targeted in alleged data breach by fog

The technology company Aeonsparx has been listed in a data leak announcement published by the threat actor group known as fog. According to the announcement made on March 6, 2025, the group claims to have successfully exfiltrated data belonging to the organization.

Details of the alleged attack

The threat actor group fog claims that the data belonging to Aeonsparx was exfiltrated on March 5, 2025. The group has published a dataset that is alleged to originate from the organization's GitLab infrastructure. The total size of the claimed dataset is 172 GB. Information regarding the specific identity and background of the fog group remains limited, as there is little publicly available data concerning their operations or specific methodologies.

Data and affected information

The information released by the threat actor group suggests that the breach involves significant amounts of technical data. The 172 GB of data was allegedly obtained from the organization's GitLab infrastructure. Based on the claims, the affected information includes:

• Source code
• Software development data

No specific file count or ransom demand was provided in the announcement.

Context of ransomware leak sites

Ransomware leak sites are frequently used by threat actors as a tool for double extortion. In these scenarios, attackers do not merely encrypt an organization's systems but also steal sensitive data to use as leverage. By threatening to release stolen information on a public or semi-public leak site, the attackers aim to pressure the victim into paying a ransom to prevent the exposure of proprietary or sensitive information.

Organization profile

Aeonsparx is a technology and software development company based in Malaysia. The company specializes in providing software solutions, digital transformation, and technology consulting services.

Potential risks and implications

If the leaked data contains source code, it may pose significant risks to the organization's intellectual property and trade secrets. Such a breach could potentially expose vulnerabilities in the organization's software products and facilitate supply chain attacks, where attackers leverage the compromise of a vendor to reach their customers. Given that the organization is based in Malaysia, legal processes under relevant local data protection regulations may be triggered as a result of this incident.

Furthermore, if the leaked data includes employee or customer information, secondary risks such as identity theft and targeted phishing attacks may emerge. Organizations in the technology sector often face these risks when development environments or repositories are compromised.

Defensive measures for technology organizations

To mitigate the risks associated with such breaches, organizations typically focus on securing their software development lifecycle and infrastructure. Implementing robust access controls and multi-factor authentication for platforms like GitLab is a common defensive step. Additionally, monitoring for unauthorized data exfiltration and maintaining strict encryption standards for data at rest and in transit can help reduce the impact of an attack. Organizations must also remain vigilant regarding the potential for secondary attacks, such as phishing, that often follow a data leak.