Danthi Comunicacao Integrada listed on beast ransomware leak site

• Ransomware group: beast
• Country: Brazil
• Sector: Professional Services
• Announcement date: October 24, 2025

Danthi Comunicacao Integrada, a professional services firm based in Brazil, has been listed on the leak site of the ransomware group known as beast. The group has published an announcement claiming that the organization's data has been compromised in a recent cyberattack.

The claims made by beast

According to the announcement published by the beast group on October 24, 2025, the group claims to have successfully targeted Danthi Comunicacao Integrada. The group asserts that the attack took place around October 15, 2025. In their public listing, the threat actors claim to have exfiltrated approximately 300 GB of data belonging to the organization.

The group is currently employing a common tactic used by modern ransomware operators, often referred to as double extortion. In this scenario, attackers do not just encrypt a victim's systems but also steal sensitive information to use as leverage. The beast group has stated that they are currently awaiting contact from the organization, maintaining the threat that they will proceed to publish the alleged data if their demands are not met. No specific ransom demand has been made public at this time.

Data types involved in the alleged breach

The leak site announcement includes screenshots intended to serve as proof of the breach. These samples suggest that the compromised information includes a variety of sensitive documents and personal details. Based on the available information, the data allegedly stolen includes:

• Boarding passes
• Personal identification information
• Official correspondence
• Corporate documents

The presence of such diverse file types suggests a wide-reaching compromise of the organization's digital environment, potentially affecting both individual privacy and corporate operations.

About Danthi Comunicacao Integrada

Danthi Comunicacao Integrada is a professional services agency located in Brazil, specializing in public relations and strategic communication. The company provides a comprehensive suite of services designed to manage brand reputation and crisis communication. Their expertise extends across various communication platforms, including both traditional media and digital communication channels, helping clients navigate complex strategic landscapes.

Implications and risk assessment

This incident poses significant risks, particularly regarding the exposure of sensitive information belonging to the organization's clients and business partners. The nature of the data—which includes personal identification and official correspondence—could potentially be utilized by malicious actors for identity theft or highly targeted phishing attacks against the individuals involved.

From a regulatory perspective, the organization may face legal responsibilities regarding the protection of personal data under Brazil's LGPD (Lei Geral de Proteção de Dados) regulations. Furthermore, because Danthi Comunicacao Integrada operates specifically in the field of reputation management, this security incident may have negative impacts on the company's brand credibility and the trust placed in them by their clientele.

In general, when organizations face such threats, common defensive steps include implementing robust multi-factor authentication, maintaining offline backups, and conducting regular security awareness training to prevent phishing. For companies in the professional services sector, protecting client confidentiality is paramount to maintaining business continuity and market trust.