Everest ransomware group lists Notin - Database leaked on its leak site

• Ransomware group: Everest
• Country: Spain
• Sector: Technology
• Announcement date: January 14, 2026

The threat actor known as Everest has issued a claim on its leak site alleging that a database belonging to the technology company Notin has been leaked. This announcement, which marks a potential significant security incident for the organization, was posted to the group's platform on January 14, 2026.

The claimed attack and event details

According to the announcement published by the Everest group, the threat actors claim to have successfully gained unauthorized access to the organization's database. Following this alleged breach, the group asserts that they have leaked the associated data. This claim was officially added to the group's leak site on January 14, 2026, coinciding with the date the attack was allegedly carried out.

Ransomware groups often utilize leak sites to increase pressure on their victims through a tactic known as double extortion. In these scenarios, attackers do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive data. The threat of releasing this stolen information on a public platform serves as a powerful tool for extortion, aimed at forcing the victim to pay a ransom to prevent the disclosure of proprietary or sensitive information.

Details regarding the leaked data

At this time, there is no detailed information available regarding the specific content or the nature of the allegedly leaked data. While the group has made an announcement, the provided evidence does not offer clarity on what was taken. Specifically, the screenshot provided by the threat actor does not contain any data samples, as it only displays a loading screen.

The listing names no specific data types that have been compromised.

Potential secondary risks and implications

Given the past activities of the Everest group, this situation is viewed as a development that may lead to data privacy breaches and operational disruptions for the organization. Because the group focuses heavily on data theft and extortion, there is a strong suggestion that the leaked information may be offered for sale on various platforms in the future.

Furthermore, the breach presents significant secondary risks. For the organization's customers and employees, the exposure of data can lead to identity theft or the occurrence of targeted phishing attacks. These types of attacks often leverage stolen information to gain further access to systems or to deceive individuals into revealing more sensitive credentials.

Organizational and legal considerations

The organization involved, Notin, is based in Spain. This geographic location introduces specific regulatory implications. As a company operating within the European Union, a potential data leak may bring about legal sanctions under the General Data Protection Regulation (GDPR). Such regulations are designed to protect the privacy of individuals and impose strict requirements on how organizations handle and protect personal data.

In the technology sector, maintaining robust security postures is critical to preventing such incidents. Organizations in this sector typically focus on defensive measures such as implementing multi-factor authentication, maintaining rigorous patch management schedules, and conducting regular security audits to mitigate the risk of unauthorized access. Furthermore, establishing comprehensive incident response plans is a standard defensive step to manage the operational and legal fallout should a breach occur.