AguAseo listed on Gammax ransomware leak site

• Ransomware group: Gammax
• Country: Colombia
• Sector: Energy & Utilities
• Announcement date: July 30, 2026

Gammax claims data breach at AguAseo

The ransomware group known as Gammax has listed the Panama-based organization AguAseo on its dedicated leak site. According to the announcement made on July 30, 2026, the threat actor group claims to have successfully compromised the organization's data. This development follows a pattern common in modern cyberattacks, where threat actors use leak sites to pressure victims by threatening the public release of sensitive information.

The group has initiated a countdown timer on their platform, signaling a potential publication of the stolen data. This tactic is a hallmark of double extortion, a method where attackers not only encrypt an organization's systems to disrupt operations but also steal sensitive data to leverage against the victim. By threatening to leak the information, attackers aim to increase the pressure on the target to meet their demands.

Details of the alleged data theft

The Gammax group has provided specific details regarding the scale of the alleged breach. The announcement claims that the attackers have obtained a total of 34,011 files. The total volume of the data claimed to be stolen is approximately 57.9 GB. While the group has provided these figures, no ransom demand has been specified in the public announcement.

Based on screenshots provided in the leak announcement, the stolen information appears to include highly sensitive operational documents. The content identified in these samples suggests that the breach involves critical information regarding the organization's service delivery and infrastructure. The affected data types reportedly include:

• Operational route plans
• Technical maps
• Corporate operational data

The presence of such documents in a leak announcement indicates that the attackers have moved beyond simple data theft and are now utilizing specific operational details to demonstrate the impact of their intrusion.

About AguAseo

AguAseo is an organization that provides solid waste collection and environmental cleaning services. Its operations are centered in the Colón province of Panama, where it plays a vital role in the region's sanitation and environmental maintenance infrastructure.

Potential impact and organizational considerations

The alleged leak of technical and operational data poses significant risks to the organization. Specifically, the exposure of technical maps and operational route plans could jeopardize the organization's operational continuity. Furthermore, the disclosure of these details could impact the security of the physical and digital infrastructure in the region that the organization serves.

The sharing of technical documents can be particularly dangerous as it may expose the intricacies of the service network. Such information could potentially be used by other malicious actors to facilitate secondary attacks against the organization or the critical infrastructure it maintains. In the energy and utilities sector, where operational technology and physical service routes are closely linked, the loss of such data can have cascading effects on regional stability.

While information regarding the specific capabilities and identity of the Gammax group remains limited, the incident highlights the ongoing risks faced by essential service providers. Organizations operating in this sector may need to evaluate their data protection obligations under Panamanian law and conduct a thorough review of their affected operational processes to mitigate further risks. General defensive measures for organizations facing such threats often include enhancing network segmentation, implementing strict access controls, and maintaining robust, offline backups to ensure resilience against both encryption and data exfiltration attacks.