Edesur Dominicana listed on Hunters leak site

• Ransomware group: Hunters
• Country: Dominican Republic
• Sector: Energy & Utilities
• Announcement date: March 11, 2025

Hunters claims data exfiltration against Edesur Dominicana

The threat actor known as Hunters has listed Edesur Dominicana on its leak site, alleging the exfiltration of company data. This announcement, made on March 11, 2025, marks a new development in the group's activities targeting various organizations.

According to the claims made by the Hunters group, the organization was targeted on March 11, 2025. The group asserts that an exfiltration event has occurred, involving the unauthorized removal of data belonging to the company. Notably, the listing specifies that while the data was not encrypted, a significant exfiltration event is alleged to have taken place.

In modern cyberattack landscapes, threat actors often employ a tactic known as double extortion. In such scenarios, attackers do not merely encrypt a victim's files to demand a ransom for decryption; they also steal sensitive information to use as leverage. By threatening to release the stolen data on public leak sites, attackers increase the pressure on the victim to comply with their demands. This shift in strategy highlights a growing trend where data theft is prioritized over traditional encryption-based ransomware.

Details of the alleged data breach

The listing provided by the Hunters group does not offer specific details regarding the nature of the alleged leaked data. While the group claims to have successfully exfiltrated information, the specific types of files or the sensitivity of the content remain undisclosed in the announcement. However, the group provided some metrics regarding the volume of the alleged theft.

Based on the information provided in the leak site announcement, the following details were shared:

• Total volume of data: 307.2 GB
• Total file count: 37,044 files

The lack of specific information regarding the content of these files makes it difficult to determine the exact impact of the breach at this stage. The group has not provided any further details regarding the specific data types or the contents of the 37,044 files mentioned in their claim.

About Edesur Dominicana

Edesur Dominicana is an electricity distribution company based in Santo Domingo, the capital of the Dominican Republic. The company is responsible for the distribution and sale of electrical energy in the southern region of the country. Given its role in the energy sector, the organization provides critical infrastructure services to the population in its service area.

Potential risks and sector implications

The claims made by the Hunters group may pose a risk to the organization's operational continuity. Depending on the content of the leaked data, risks such as identity theft or targeted phishing attacks against employees and customers may emerge. When sensitive information is exfiltrated, it can be used by malicious actors to conduct more sophisticated social engineering campaigns or to impersonate individuals within the organization.

For organizations in the energy sector providing critical infrastructure services, such leaks could lead to reputational damage and investigations by regulatory bodies. Because energy providers are vital to national stability, any breach involving their data is often met with high levels of scrutiny from government and regulatory authorities.

Public information regarding Hunters International is limited. However, reports suggesting that the group ceased encryption activities as of 2025 may indicate that the group could be pursuing a strategy focused solely on data exfiltration. This evolution in their tactics suggests that the group may prioritize the theft of information over the disruption of services through encryption.

To mitigate such risks, organizations typically focus on strengthening their defensive posture through various security measures. These include implementing robust monitoring to detect unauthorized data movement, enforcing strict access controls to limit the amount of data available to any single user, and conducting regular security awareness training to help employees recognize phishing attempts. Maintaining a strong incident response plan is also essential for managing the fallout of a potential data exfiltration event.