devman ransomware group lists www.profimetrics.com on its leak site

• Ransomware group: devman
• Country: Portugal
• Sector: Technology
• Announcement date: October 1, 2025

Profimetrics targeted by devman ransomware group

The Portugal-based technology firm Profimetrics has been listed on the leak site operated by the ransomware group known as devman. According to the announcement made on October 1, 2025, the threat actor claims to have targeted the organization, marking a new instance of extortion-based cyberattacks within the technology sector.

The incident involves a claim of a data breach, a common tactic used by modern ransomware operators to pressure victims into paying ransoms. In these scenarios, threat actors typically employ a double extortion strategy. This method involves not only encrypting an organization's internal systems to disrupt operations but also exfiltrating sensitive information. The attackers then threaten to publish this stolen data on public leak sites if the ransom demands are not met, thereby increasing the pressure on the victim through the threat of reputational damage and regulatory scrutiny.

Details of the devman claim

The announcement posted by the devman group specifies a ransom demand of 50,000 USD from Profimetrics. The threat actor has indicated that the attack occurred on October 1, 2025, the same day the listing appeared on their platform. The group has explicitly threatened to publish the institution's data if their financial demands are not satisfied.

While the threat of data exposure is central to this extortion attempt, the listing provides no specific details regarding the nature of the leaked or threatened data. There is no information available regarding the volume of files involved or the total size of the data allegedly stolen during the intrusion.

About Profimetrics

Profimetrics is a technology company headquartered in Portugal. The firm specializes in providing advanced pricing, promotion management, and analytics solutions specifically designed for the retail sector. Through the development of sophisticated software platforms, the company assists various businesses in optimizing their profitability through data-driven insights and management tools.

Risk assessment and industry implications

This situation suggests that the organization's network security may have been compromised, potentially allowing for the exfiltration of sensitive information. If the ransom demand is not met, there is a significant risk that trade secrets or customer data could be made public. Because Profimetrics is based in Portugal, this incident may necessitate reporting to data protection authorities under the General Data Protection Regulation (GDPR) framework.

Publicly available information regarding the devman group remains limited. However, ransomware attacks of this nature can lead to significant operational disruptions and lasting reputational damage for the affected organization. For companies operating in the technology and retail analytics sectors, such incidents highlight the critical importance of robust defensive measures.

To mitigate the risks associated with ransomware and data exfiltration, organizations often implement several defensive strategies. These include maintaining rigorous patch management schedules to close vulnerabilities, implementing multi-factor authentication (MFA) across all access points, and maintaining offline, immutable backups to ensure data can be restored without paying a ransom. Furthermore, continuous monitoring of network traffic can help detect unauthorized data movement, which is a key indicator of an ongoing exfiltration attempt. As threat actors continue to target specialized technology firms, maintaining a proactive security posture remains essential for protecting intellectual property and maintaining client trust.