funksec ransomware group lists rattelacademy.com on its leak site

• Ransomware group: funksec
• Country: Israel
• Sector: Education
• Announcement date: February 5, 2025

Funksec claims data breach at Rattel academy

The threat actor known as funksec has listed the educational institution rattelacademy.com on its leak platform. This announcement, which appeared on the group's leak site, indicates a potential compromise of the organization's digital environment. The group claims to have successfully obtained access to the institution's data, though the validity of these claims remains unverified at this stage.

Ransomware leak sites are frequently used by cybercriminal groups as a method of extortion. In many instances, these groups employ a tactic known as double extortion, where they not only encrypt an organization's systems to disrupt operations but also threaten to publish sensitive data online if a ransom is not paid. By listing a victim on a public platform, the threat actor increases the pressure on the target organization to comply with their demands.

Details of the alleged incident

The incident was officially announced on the funksec leak site on February 5, 2025. According to the group's claims, the attack occurred on the same day the announcement was made. However, it is important to note that the provided evidence, specifically the screenshot associated with the listing, does not contain any data samples or concrete evidence of a breach. The screenshot currently available shows only an error page, providing no confirmation of the actual content or the extent of the intrusion.

Data and information involved

Regarding the nature and content of the allegedly leaked data, no information has been provided by the threat actor. There is no information regarding the specific types of files, the volume of data, or the total number of files involved in this incident. The listing names no specific data types.

About Rattel academy

Rattel Academy is an educational institution based in Israel. The organization provides specialized training and certification programs, specifically focusing on the fields of cybersecurity and technology.

Analysis and potential impact

The funksec group is reported to have emerged in late 2024 and is known for utilizing AI-powered tools in their operations. The potential exposure of institutional data in such a scenario can create significant secondary risks. For an educational institution, this may include risks such as identity theft or targeted phishing attacks aimed at students and staff members.

Because the institution is based in Israel, a confirmed data breach could trigger various legal processes under local data protection regulations. Furthermore, given the methods employed by the funksec group, it is possible that the institution's operational continuity could be negatively impacted by such an attack.

While it is not possible to reach a definitive conclusion regarding the validity of the claims or the actual scope of the leaked data at this stage, organizations in the education sector often implement defensive measures to mitigate such risks. These measures typically include robust backup strategies, regular security awareness training for students and staff, and the implementation of multi-factor authentication to protect sensitive administrative and academic information.