Ascires.com targeted by babuk2 ransomware group in data leak announcement

• Ransomware group: babuk2
• Country: Spain
• Sector: Healthcare
• Announcement date: April 2, 2025

Ascires.com listed in ransomware leak announcement

The Spain-based healthcare organization ascires.com has been listed in a ransomware leak announcement by the threat actor known as babuk2. According to the announcement published on April 2, 2025, the group claims to have successfully compromised the organization's systems and obtained a significant amount of sensitive information.

Ransomware attacks often involve a tactic known as double extortion, where attackers not only encrypt an organization's data to disrupt operations but also threaten to leak stolen information on public leak sites if a ransom is not paid. This method places immense pressure on organizations due to the potential for reputational damage and regulatory scrutiny. In this specific instance, the threat actor's claims regarding the breach of ascires.com have been made public via a dedicated leak site.

Details of the alleged breach

The threat actor known as babuk2 claims to have obtained approximately 1.2 TB of data belonging to ascires.com. While the group has made this claim, public information regarding the specific capabilities and identity of this group remains limited. The group alleges that the breach occurred around October 11, 2024, though the announcement itself was not made until several months later.

The announcement specifies that the stolen information includes a variety of sensitive materials. According to the claims made by the group, the compromised data consists of the following:

• Research data
• Client records
• Internal documents
• Personal information
• Access log credentials

The presence of access log credentials in such leaks is particularly concerning for organizations, as it may provide attackers with methods to attempt further unauthorized entry into the network or other interconnected systems.

About ascires.com

Ascires is a Spain-based healthcare organization providing radiology, nuclear medicine, and advanced diagnostic imaging services. The company operates through a network of clinics specializing in medical imaging and diagnostics. Given the nature of its operations, the organization handles a high density of sensitive medical and personal information.

Potential impacts and industry considerations

The claims made by babuk2 may create negative impacts on the organization's patient privacy and data security processes. For an organization located within the European Union, such as Ascires, legal sanctions and administrative procedures under the General Data Protection Regulation (GDPR) may arise if the claims are verified. The nature of the allegedly leaked data may bring about secondary risks such as identity theft and targeted phishing attacks for the individuals whose information was stolen.

The healthcare sector, where the organization operates, may be highly affected by such leaks due to the density of sensitive data. When medical records or personal identifiers are compromised, the risk to individual privacy is significantly elevated. If the threat actor's claims are verified, challenges may be seen regarding the organization's operational continuity and reputation management.

To defend against such threats, organizations typically implement a multi-layered security approach. This includes maintaining robust backup solutions to ensure operational continuity, implementing strict access controls to protect sensitive data, and conducting regular security monitoring to detect unauthorized access. Furthermore, maintaining awareness of the evolving tactics used by ransomware groups is a critical component of a modern cybersecurity posture.