Computing Dynamics data allegedly leaked by interlock group

• Ransomware group: interlock
• Country: United Kingdom
• Sector: Technology
• Announcement date: December 9, 2025

The technology company Computing Dynamics has been targeted by the interlock ransomware group. According to an announcement made on a leak site, the threat actor claims to have successfully breached the organization's systems and exfiltrated a significant amount of confidential information.

The claimed attack and breach details

The threat actor known as interlock published an announcement on its leak site on December 9, 2025, claiming responsibility for the incident. The group asserts that it gained unauthorized access to the internal systems of Computing Dynamics and subsequently compromised various types of confidential data. This type of activity is often associated with double extortion tactics, where attackers not only encrypt a victim's data to disrupt operations but also steal sensitive information to use as leverage for ransom demands.

In such scenarios, ransomware groups typically use a dedicated leak site to pressure organizations into paying. If the victim refuses to meet the attackers' demands, the group threatens to release the stolen data to the public or to specific industry partners. While the specific motivations and operational methods of the interlock group remain unclear due to limited public information, the claim of a successful breach has been officially posted by the group.

Details of the leaked data

Based on the information provided in the leak site announcement, the breach involves a substantial volume of data. The group claims to have exfiltrated approximately 591.6 GB of information. Specifically, screenshots provided by the attackers suggest the presence of two major directories: a 'CDIDATA' folder, which is approximately 572.7 GB in size, and an 'OutlookFiles' folder, which is approximately 18.9 GB in size.

The contents of these folders are said to include a variety of sensitive information. The leaked data is claimed to consist of the following:

• Client data
• Employee data
• Contact information

This includes specific details such as names, phone numbers, and addresses. The inclusion of Outlook files suggests that the attackers may have targeted email communications, which often contain highly sensitive corporate and personal correspondence.

Organizational profile

Computing Dynamics is a technology company based in the United Kingdom. The firm specializes in providing custom software development and IT services to its clients.

Potential implications and defensive considerations

This incident may pose a significant risk regarding the exposure of personal data belonging to both the employees and the clients of Computing Dynamics. Because the company operates within the United Kingdom, this situation could potentially lead to legal consequences under the UK GDPR (General Data Protection Regulation) framework. The exposure of such data often leads to secondary risks, such as the potential for identity theft or the execution of highly targeted phishing attacks against the individuals whose information was compromised.

For companies operating in the technology and software development sector, such incidents highlight the critical importance of robust cybersecurity frameworks. To mitigate the risks associated with data exfiltration, organizations typically implement several defensive layers. This includes maintaining strict access controls to limit the movement of attackers within a network, implementing comprehensive logging and monitoring to detect unauthorized access early, and employing strong encryption for data both at rest and in transit.

Furthermore, regular security audits and vulnerability assessments are essential for identifying weaknesses before they can be exploited by threat actors. As seen in this case, the loss of email archives and large data directories can result in massive data volumes being moved out of the network, making network traffic analysis and data loss prevention (DLP) tools vital components of a modern security posture. While the specific methods used by interlock in this instance are not fully understood, the scale of the claimed breach underscores the ongoing threat posed by ransomware groups to technology service providers.