Étude Bordet listed on datacarry leak site

• Ransomware group: datacarry
• Country: Belgium
• Sector: Professional Services
• Announcement date: May 26, 2025

Étude Bordet listed on datacarry leak site

The threat actor group known as datacarry has listed the Belgian law firm Étude Bordet on its leak site. According to the announcement made by the group, the organization has been targeted in a cyberattack involving a data breach.

Details of the claimed attack

The datacarry group published an announcement on May 26, 2025, claiming to have compromised data belonging to Étude Bordet. While the announcement was made in May, the threat actor alleges that they successfully gained access to the organization's network much earlier, specifically on January 12, 2025. Information regarding the specific identity or technical capabilities of the datacarry group remains limited in the public domain.

In modern cybercrime, ransomware groups often utilize leak sites to pressure victims. This tactic is frequently associated with double extortion, where attackers not only encrypt an organization's systems to disrupt operations but also steal sensitive data to threaten its public release. By hosting a dedicated site, these groups create a public platform to shame organizations into paying ransoms to prevent the dissemination of stolen information.

Data involvement and information availability

Regarding the specifics of the breach, there is no information or screenshot available regarding the nature of the leaked or threatened data. The listing does not specify the volume of data stolen or the specific file types involved. Furthermore, no ransom demand has been publicly documented in relation to this specific claim.

• No specific data types were named in the listing.

When organizations face such claims, the lack of immediate clarity regarding the stolen data can complicate incident response efforts. Without knowing whether the breach involves intellectual property, personal identification information, or financial records, the scope of the potential impact remains uncertain during the initial stages of an investigation.

About Étude Bordet

Étude Bordet is a law firm based in Brussels, Belgium. It provides professional legal services, specializing in real estate law, construction law, and contract law.

Potential risks and organizational implications

The potential publication of the organization's data may create secondary risks such as identity theft or targeted phishing attacks for employees and clients. Because the organization operates within the professional services sector, there may be a risk of exposure regarding sensitive commercial or client information. Such exposure can undermine the trust established between a legal professional and their clientele.

Given that the organization operates in Belgium, a confirmation of the breach could lead to legal proceedings and administrative sanctions under the General Data Protection Regulation (GDPR). Regulatory frameworks like the GDPR impose strict requirements on how organizations must protect personal data and how they must report breaches to authorities and affected individuals.

The subsequent actions of the threat actor regarding ransom demands or data dissemination may affect the operational continuity of the organization. To mitigate such risks, organizations in the professional services sector typically focus on robust defensive measures. These include implementing multi-factor authentication, maintaining regular offline backups, conducting regular security awareness training for staff, and ensuring that all software and systems are patched against known vulnerabilities. Continuous monitoring of network traffic can also help in detecting unauthorized access attempts before they escalate into full-scale data exfiltration events.