Eogb.co.uk listed on Stormous ransomware leak site

• Ransomware group: Stormous
• Country: United Kingdom
• Sector: Energy & Utilities
• Announcement date: June 28, 2026

Stormous claims data breach at eogb.co.uk

The threat actor known as Stormous has listed eogb.co.uk on its leak site, alleging the compromise of corporate data. According to the announcement posted on June 28, 2026, the group claims to have gained unauthorized access to the organization's Microsoft Dynamics GP system. This access allegedly allowed the attackers to exfiltrate various corporate documents and sensitive information. While the group has published this leak announcement, they have not disclosed any specific ransom demand or provided information regarding the total volume of data stolen during the incident.

Ransomware groups often utilize leak sites to increase pressure on their targets through a tactic known as double extortion. In these scenarios, attackers do not merely encrypt a company's systems to disrupt operations; they also steal sensitive data and threaten to release it publicly if their demands are not met. This approach seeks to maximize leverage by threatening the victim's reputation and legal standing. While the specific details of the attack on eogb.co.uk remain limited to the group's claims, the use of a leak site is a hallmark of such high-pressure extortion campaigns.

Alleged data exfiltration from Microsoft Dynamics GP

The announcement made by Stormous claims that the breach involved access to the Microsoft Dynamics GP system. The group alleges that this access resulted in the theft of a wide range of internal documentation and sensitive business records. Although no screenshots were provided by the group to verify their claims, the list of allegedly compromised information is extensive. The data types mentioned in the leak site announcement include:

• Accounting records
• Invoices
• Vendor details
• Commercial transactions
• Legal documents
• Partnership agreements
• Customer contracts
• Operational reports

The exposure of such a diverse array of documents suggests a significant potential risk to the organization's financial and commercial integrity. When internal systems like ERP software are targeted, the breadth of accessible data can be vast, covering everything from basic transactional records to complex legal and operational frameworks.

Organization profile

EOGB Energy is a British company that designs and manufactures high-efficiency burner systems and combustion technologies for industrial and commercial applications. The company specializes in heating and energy efficiency solutions.

Analysis and potential impact

These claims may indicate a risk of exposure for sensitive financial and commercial data within eogb.co.uk. Given the entity's location in the United Kingdom, this incident could raise concerns regarding compliance with UK GDPR data protection obligations. The alleged exposure of customer contracts and vendor details may create secondary risks for third parties and potentially facilitate targeted phishing campaigns, as attackers may use the stolen information to impersonate legitimate business partners or service providers.

Furthermore, considering the Stormous group's history of politically motivated activities, negative impacts on corporate reputation may be observed. The group's past operations suggest that they utilize data leaks as a leverage mechanism to achieve their objectives. For organizations in the energy and utilities sector, maintaining the confidentiality of operational and commercial data is critical for maintaining trust with partners and customers alike.

To defend against such threats, organizations typically implement multi-layered security strategies. This includes securing access to critical enterprise resource planning (ERP) systems, such as Microsoft Dynamics GP, through strict identity and access management protocols. Implementing robust monitoring to detect unauthorized data exfiltration and maintaining comprehensive backups are also essential defensive steps. As ransomware groups continue to evolve their extortion methods, staying vigilant against the potential for both data encryption and data theft remains a primary concern for modern cybersecurity programs.