Akantha listed on ElDorado ransomware leak site

• Ransomware group: ElDorado
• Country: France
• Sector: Technology
• Announcement date: January 5, 2025

ElDorado claims Akantha data breach

The ElDorado ransomware group has officially listed the technology company Akantha on its dedicated leak site. According to the announcement made on January 5, 2025, the threat actor claims to have successfully compromised the organization's networks and gained unauthorized access to its internal data. This development follows an alleged attack date of December 23, 2024.

Ransomware groups often utilize leak sites as a tool for double extortion, a tactic where attackers not only encrypt an organization's systems but also threaten to release sensitive information to pressure the victim into paying a ransom. By publishing a company's name on these sites, threat actors aim to damage the victim's reputation and create public pressure. In the case of ElDorado, public information regarding the group's specific tactics, motivations, or overall infrastructure remains limited in the public domain.

Details of the alleged leak

Despite the listing on the ElDorado leak site, there is currently a lack of specific technical details regarding the incident. The threat actor has not provided any screenshots or detailed information regarding the nature of the leaked or threatened data. Furthermore, the group has not disclosed the total size of the data involved or the specific number of files that were allegedly exfiltrated. There has also been no mention of a specific ransom demand associated with this claim.

The listing names no specific data types that have been compromised.

About Akantha

Akantha is a technology company based in France that specializes in providing digital solutions for the legal sector. The company is the developer of Portalis, a specialized legal software designed specifically for lawyers. Through its platform, Akantha provides essential digital tools for law firms, including document sharing capabilities, data hosting services, and comprehensive legal process management solutions.

Potential implications and risks

The claim made by ElDorado carries significant implications, particularly regarding the confidentiality of legal data and operational information belonging to Akantha's clients. Because Akantha is a French-based company, any confirmed data breach could trigger serious legal consequences under the European Union's General Data Protection Regulation (GDPR), which governs how personal data must be protected and how breaches must be reported.

Given that the organization develops specialized software for the legal profession, a breach of this nature could potentially compromise client confidentiality. Such an exposure increases the risk of secondary attacks, such as targeted phishing campaigns, where attackers use stolen information to deceive individuals or organizations. Beyond the immediate technical and legal risks, such a leak may result in a negative impact on the company's commercial reputation and lead to a significant loss of trust among its client base.

To mitigate such risks, organizations in the technology and legal software sectors often implement various defensive measures. These include robust encryption for data at rest and in transit, multi-factor authentication to secure access to sensitive networks, and continuous monitoring of network traffic to detect unauthorized access. Additionally, maintaining a rigorous incident response plan and ensuring compliance with regional data protection regulations are critical components of a modern cybersecurity posture.