Engikam listed on fog ransomware leak site

• Ransomware group: fog
• Country: Italy
• Sector: Technology
• Announcement date: March 6, 2025

The technology company Engikam has been listed on the leak site of the ransomware group known as fog. The announcement, which was published on March 6, 2025, indicates that the group claims to have successfully breached the company's technology infrastructure.

The claimed attack and event details

According to the announcement made by the fog group, the breach allegedly occurred on March 5, 2025. The group claims to have obtained a significant amount of data, which they have made accessible to the public via torrent and web links. This type of activity is characteristic of modern ransomware operations, where threat actors utilize double extortion tactics. In such scenarios, attackers do not merely encrypt a victim's systems to demand a ransom for decryption; they also steal sensitive information to threaten the public release of the data if their demands are not met.

The fog group has published this listing on their dedicated leak site, a common practice used by ransomware operators to exert pressure on their targets. While the group has made these claims, the incident remains an allegation by the threat actor. The group's public profile and available information remain limited, making it difficult to ascertain the full scope of their operational methods or historical activity.

The data involved in the alleged leak

The fog group claims that the stolen data set consists of approximately 59 GB of information. The group asserts that this data was extracted specifically from the company's GitLab servers. GitLab is a widely used platform for version control and software development collaboration, making it a high-value target for attackers seeking intellectual property.

Despite the significant size of the claimed data set, the announcement provides no specific details regarding the nature of the content. The listing does not specify the exact types of files or the specific categories of information contained within the 59 GB of data. Consequently, the listing names no specific data types.

Engikam company profile

Engikam is an Italian technology company that specializes in the design and manufacture of high-performance System-on-Modules (SoM). Their expertise extends to creating customized hardware solutions for embedded systems. The company provides innovative hardware platforms that support various critical sectors, including industrial automation, medical devices, and Internet of Things (IoT) applications.

Implications and organizational risks

The alleged leak poses several significant risks to the organization. Because the data was purportedly taken from GitLab servers, there is a high risk to the company's intellectual property and software source code. The compromise of development environments can have a cascading effect on supply chain security, potentially impacting the integrity of the software development processes and the products delivered to customers.

Furthermore, since Engikam is based in Italy, this incident may trigger mandatory data breach notification obligations under the General Data Protection Regulation (GDPR). If the leaked data is found to include personal information belonging to employees or customers, the company may face secondary risks, such as targeted phishing attacks or identity theft directed at those individuals.

In the technology and hardware manufacturing sector, maintaining the integrity of development pipelines is essential. Organizations in this space often implement defensive measures such as multi-factor authentication, strict access controls for source code repositories, and continuous monitoring of development environments to mitigate the risk of unauthorized access. Protecting the software supply chain is a critical component of modern cybersecurity posture, especially for companies providing hardware for industrial and medical applications.