eFunda, Inc. listed on bqtlock ransomware leak site

• Ransomware group: bqtlock
• Country: United States
• Sector: Technology
• Announcement date: July 31, 2025

Technology firm eFunda, Inc. targeted by bqtlock ransomware group

The technology firm eFunda, Inc. has been listed on the leak site of the bqtlock ransomware group. According to the announcement made on July 31, 2025, the group claims to have successfully executed an attack against the organization on the same date.

Claims made by the bqtlock group

The bqtlock group claims to have compromised approximately 670 GB of data belonging to eFunda, Inc. The announcement indicates that the attack has significantly impacted the organization's technical infrastructure, specifically affecting over 270 subdomains. To prevent the public release of the stolen information, the threat actors are demanding a ransom payment of 200 XMR.

Ransomware attacks of this nature often involve a tactic known as double extortion. In these scenarios, attackers do not merely encrypt a victim's systems to disrupt operations; they also exfiltrate sensitive data. The threat of leaking this data on a public leak site serves as additional leverage to pressure the victim into paying the ransom. By threatening to release proprietary or sensitive information, the attackers increase the stakes for the organization, moving beyond simple operational disruption to potential reputational and legal damage.

Details of the alleged data breach

While the group has claimed a significant volume of stolen information, the specific nature of the compromised data has not been disclosed by the attackers. The listing does not provide details regarding the specific file types or the exact contents of the stolen material.

The following elements are reportedly involved in the incident:

• Approximately 670 GB of data
• Over 270 subdomains within the organization's infrastructure

The lack of specific information regarding the data types makes it difficult to determine the exact scope of the privacy impact at this stage. However, the involvement of a large number of subdomains suggests a broad impact across the organization's digital footprint.

Organization profile: eFunda, Inc.

eFunda is a technology company that provides online resources and technical databases for engineering design and material selection. It offers technical references, calculation tools, and comprehensive information on industrial components for engineers.

Potential implications and organizational risks

This incident may pose significant risks to the organization's operational continuity and data privacy. As a United States-based entity, a potential data breach could lead to legal consequences under state-level data protection laws and sectoral regulations. Furthermore, secondary risks include the potential use of compromised data for identity theft or targeted phishing attacks against the organization or its clients.

The bqtlock group appears to operate under a Ransomware-as-a-Service (RaaS) model. In a RaaS model, specialized developers create the ransomware code and infrastructure, which is then leased to affiliates who carry out the actual attacks. This model allows cybercriminal groups to scale their operations significantly. Because public information regarding the bqtlock group is limited, it highlights the difficulty organizations face when defending against evolving RaaS entities.

For organizations operating in the technology and engineering support sectors, such incidents underscore the importance of robust cybersecurity frameworks. It may be advisable for the organization to conduct a comprehensive security audit and evaluate potential data breach notification obligations. General defensive measures for organizations facing such threats typically include implementing multi-factor authentication, maintaining offline backups, and conducting regular vulnerability assessments to identify weaknesses in the technical infrastructure before they can be exploited by threat actors.