Department of Culture and Tourism Abu Dhabi targeted by Everest ransomware group

• Ransomware group: Everest
• Country: United Arab Emirates
• Sector: Government & Defense
• Announcement date: May 26, 2025

Everest ransomware group claims data breach at Department of Culture and Tourism Abu Dhabi

The Everest ransomware group has officially listed the Department of Culture and Tourism Abu Dhabi on its leak site. According to the announcement made on May 26, 2025, the threat actor claims to have successfully compromised the organization's data. This development follows a pattern of activity observed with this specific group, which has been active and monitored since 2020.

The threat actor, which is recognized as being Russian-speaking, has asserted that it has updated the download links for the files it alleges to have stolen from the organization. This update suggests an ongoing interest in the targeted entity and a readiness to facilitate access to the purported stolen information.

Details of the alleged incident

The incident was announced on May 26, 2025, the same date the group claims the attack occurred. While the group has updated its leak site with new links, the specific nature and volume of the data involved remain undisclosed. The group has not provided details regarding the total size of the data or the specific number of files compromised during the alleged intrusion.

The Everest group is known for employing a variety of malicious tactics, including data theft, extortion, and the sale of unauthorized access to various organizations. This methodology is a hallmark of modern ransomware operations, where the primary goal is not just the encryption of systems, but the exploitation of sensitive information to increase leverage during extortion attempts.

Data involved in the leak

The listing names no specific data types or categories of information that have been allegedly compromised.

About the Department of Culture and Tourism Abu Dhabi

The Department of Culture and Tourism Abu Dhabi is the government entity responsible for preserving, developing, and promoting the culture, tourism, and heritage assets of the Emirate of Abu Dhabi. The organization manages the region's tourism strategies and represents its cultural heritage on a global scale.

Impact and potential consequences

This alleged leak may pose significant risks to the organization's operational continuity and its overall reputation. Given the institution's critical role in providing public services, the exposure of data could potentially lead to the disclosure of citizens' personal information. Such a scenario introduces secondary risks, such as the potential for identity theft against the affected individuals.

Furthermore, the organization may face legal consequences under the existing data protection regulations of the United Arab Emirates. The potential for the stolen data to be used for extortion or sold to third parties remains a high possibility, considering the documented history and past activities of the Everest group.

In such scenarios, organizations often face the necessity of conducting a comprehensive forensic investigation to determine the exact scope of the breach. General defensive strategies for organizations in this sector typically involve strengthening network monitoring, implementing strict access controls, and ensuring robust backup protocols are in place to mitigate the impact of such intrusions. The uncertainty surrounding the stolen data necessitates a cautious approach to incident response and public communication.