Alascom listed on Rhysida ransomware leak site

• Ransomware group: Rhysida
• Country: Italy
• Sector: Technology
• Announcement date: August 10, 2025

The Rhysida ransomware group has published a listing on its dedicated leak site claiming that it has compromised the data of Alascom, a technology firm based in Italy. The announcement, which appeared on August 10, 2025, marks a new instance of the group targeting the technology sector.

The claims of the Rhysida group

According to the announcement made by the Rhysida group, the threat actor successfully gained access to the systems of Alascom. The group alleges that they have compromised the company's internal data and has released a portion of the purported stolen information as proof of the breach. This disclosure included specific details regarding the technical infrastructure and the operational activities of the targeted organization.

Ransomware groups often utilize leak sites to exert pressure on their victims through a method known as double extortion. In this tactic, attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information, threatening to publish it publicly unless a ransom is paid. This approach increases the pressure on the victim by threatening their reputation and legal standing. While the group has provided samples of data, the specific volume of the stolen data and the exact ransom demand have not been disclosed in the announcement.

Data involved in the breach

The information released by the group includes various types of sensitive documentation. Based on the samples provided, the following categories of data have been identified as being part of the leak:

• Identity documents
• Passport images
• Financial documents

The presence of such sensitive information, including personal identification and corporate financial records, highlights the potential impact of the breach on both the organization and the individuals whose data was compromised.

About Alascom

Alascom is a technology company that has been operating for over 20 years. The firm serves as a system integrator and a provider of technical consulting services within the ICT and industrial automation sectors. The company maintains a specialized focus on telecommunication networks and IP technologies.

Analysis and potential risks

The breach of a system integrator like Alascom introduces several layers of risk. Because the company provides technical services and integration, the breach could potentially create secondary risks related to supply chain security. When a service provider is compromised, the interconnected nature of modern digital infrastructure means that the breach could have downstream effects on the security posture of their clients.

Furthermore, the exposure of personal identity documents and passport images significantly increases the risk of identity theft for the company's employees or clients. This risk is often accompanied by the threat of targeted phishing attacks, where attackers use the stolen personal data to craft highly convincing and deceptive communications to trick individuals into revealing even more sensitive information.

As the company is based in Italy, this incident may lead to legal and administrative sanctions under the EU General Data Protection Regulation (GDPR), which governs how personal data must be protected and handled. Organizations operating in the technology and critical infrastructure sectors often face increased scrutiny regarding their security protocols due to the sensitive nature of the data they manage and the vital services they provide.

To defend against such threats, organizations typically implement multi-layered security strategies. This includes maintaining robust backup solutions, implementing strict access controls, and conducting regular security audits. Monitoring for unusual network activity and ensuring that all systems are patched against known vulnerabilities are also standard defensive measures used to mitigate the risk of unauthorized access by ransomware groups.