FDB Collections listed on killsec leak site

• Ransomware group: killsec
• Country: Greece
• Sector: Retail & E-Commerce
• Announcement date: September 22, 2025

FDB Collections targeted by killsec group

The Greek retail and e-commerce company FDB Collections has been listed on a cybercrime leak site by the threat actor known as killsec. The announcement, which appeared on September 22, 2025, claims that the organization's data has been compromised. To support their claims, the group has published various samples of documents that allegedly belong to the organization.

In modern cyberattack scenarios, ransomware groups often employ a tactic known as double extortion. In this model, attackers do not merely encrypt an organization's files to disrupt operations; they also exfiltrate sensitive data before the encryption occurs. The threat of leaking this stolen information on public platforms is used as leverage to pressure the victim into paying a ransom. This method significantly increases the pressure on a company, as the breach of confidentiality can lead to long-term consequences that persist even if systems are restored from backups.

Details of the alleged breach

The threat actor known as killsec claims to have successfully compromised data belonging to FDB Collections. According to the announcement, the group has published this information on their dedicated leak platform as evidence of the breach. The group has provided several document samples, including invoices and authorization documents, to substantiate their claims of unauthorized access.

The leak site announcement includes a countdown timer, which is a common tactic used by ransomware groups to create a sense of urgency. This timer is intended to pressure the organization into responding to the ransom demand within a specific timeframe. While the specific amount of the ransom demand has not been disclosed, the presence of the timer indicates an active extortion attempt.

Based on the screenshots provided by the threat actor, the following types of data are allegedly involved in the breach:

• Financial invoices
• Debt collection documents
• Corporate correspondence

The exposure of such documents can lead to various secondary risks. For instance, the availability of financial and corporate documents can be used to facilitate targeted phishing attacks or identity theft against the organization's partners and clients.

About FDB Collections

FDB Collections is a retail and e-commerce company based in Greece. The organization operates within the field of sales and distribution, dealing with various consumer products. Given its operational nature, the company maintains a network of clients and business partners that rely on the secure handling of transaction and correspondence data.

Analysis and potential impact

The killsec group is a threat actor that emerged in 2023. While the group is reported to have hacktivist origins, it has since been linked to ransomware-as-a-service (RaaS) operations. In a RaaS model, developers provide the ransomware code to affiliates who then carry out the actual attacks, allowing the criminal enterprise to scale its operations across different sectors and regions.

This specific incident may pose significant risks to FDB Collections. Because the organization is located in Greece, the breach may result in legal consequences under the European Union's General Data Protection Regulation (GDPR), which mandates strict protections for personal data. Furthermore, the sensitivity of the leaked documents, such as debt collection and financial invoices, could lead to substantial reputational damage and operational disruption for the firm.

For organizations operating in the retail and e-commerce sectors, such incidents highlight the importance of robust cybersecurity frameworks. Defensive measures typically include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular security awareness training to mitigate the risk of phishing. As the killsec group continues its operations, similar incidents may be expected in the future.