Alphalocker ransomware group lists nubox.com & sumasaas.com on its leak site

• Ransomware group: Alphalocker
• Country: Chile
• Sector: Technology
• Announcement date: September 8, 2025

Alphalocker claims data leak involving nubox.com and sumasaas.com

The Alphalocker ransomware group has published an announcement on its leak site claiming to have leaked 150 GB of data belonging to nubox.com and sumasaas.com. This announcement, posted on September 8, 2025, marks a significant claim of a successful data exfiltration operation targeting these entities.

Details of the claimed attack

According to the announcement made by the Alphalocker threat actor on September 8, 2025, the group targeted the systems of nubox.com and sumasaas.com. The group alleges that it has successfully obtained a substantial dataset totaling 150 GB from the organizations' systems. The threat actor claims that this stolen information has been made available for public access through their leak site.

The announcement specifies that the leaked information includes a variety of sensitive documents. While the group has not provided information regarding a ransom demand, the publication of the data serves as a primary component of their operation. In many modern ransomware scenarios, actors utilize double extortion tactics, where they not only encrypt an organization's data but also threaten to leak it to pressure the victim into paying a ransom. The publication of data in such instances is often intended to maximize the reputational damage and operational pressure placed on the target.

The allegedly leaked data

Based on the screenshots and registration details provided in the leak announcement, the data allegedly stolen from the organizations is extensive. The group claims to have accessed various types of sensitive corporate and personal information. The specific categories of data mentioned in the claim include:

• Contracts
• Project files
• Customer data
• HR records
• Payroll documents
• Invoices
• Technical infrastructure files

The breadth of this alleged data suggests a deep penetration into the organizations' internal systems, touching upon administrative, financial, and technical operations.

About NuBox

NuBox is a technology company based in Chile. The company provides cloud-based software solutions designed specifically for small and medium-sized enterprises. Their service offerings include specialized tools for accounting, payroll, and invoicing, making them a critical service provider for the business operations of their clients.

Potential implications and risks

If the claims made by Alphalocker are verified, several significant risks emerge for the affected organizations and their stakeholders. For the customers and employees of these Chile-based entities, the exposure of personal information could lead to secondary risks, such as identity theft and the occurrence of targeted phishing attacks. Such attacks often leverage stolen personal details to gain trust and trick individuals into revealing further sensitive information.

Furthermore, for organizations operating in the technology and software-as-a-service sector, the exposure of corporate data can result in the loss of trade secrets, which may lead to a weakening of their competitive advantage in the market. There are also significant compliance implications; these Chile-based entities may face challenges regarding local data protection regulations following such an incident.

While public information regarding the Alphalocker group remains limited, the use of data leaks as a weapon is a common trend in the current threat landscape. Organizations in the technology sector often focus on strengthening their defensive posture through robust encryption, multi-factor authentication, and regular security audits to mitigate the risk of such breaches. Protecting the integrity of technical infrastructure files and customer databases is essential for maintaining organizational reputation and trust.