GB Group listed on Direwolf ransomware leak site

• Ransomware group: Direwolf
• Country: United Kingdom
• Sector: Technology
• Announcement date: June 19, 2025

Direwolf claims to have stolen data from GB Group

The threat actor group known as Direwolf has listed the technology company GB Group on its dedicated leak site. According to the announcement made by the group, the attackers claim to have successfully exfiltrated a significant amount of information from the organization. This development follows a pattern often seen in modern cyberattacks where threat actors use public leak sites to pressure victims through the threat of data exposure.

The group published its announcement on June 18, 2025, claiming that the attack against GB Group had already taken place. In the post, the threat actors alleged that they have obtained 20 GB of data belonging to the organization. Furthermore, the group shared a schedule indicating that they intend to release the stolen data in stages rather than all at once.

Details of the claimed data exfiltration

While the total volume of the claimed theft is specified, the specific contents of the files remain partially unconfirmed. The announcement made by Direwolf mentions the presence of certain types of sensitive information that were allegedly taken during the breach. Specifically, the group claims to have accessed and stolen:

• SQL Server database files

Beyond these specific database files, the group also mentioned the presence of other unspecified data, though no further details regarding the exact nature or file count of these additional items were provided in the leak site post. No information was provided regarding a ransom demand or the specific number of files involved in the incident.

About GB Group

GB Group (GBG) is a global technology company that operates within the technology sector. The organization provides a variety of digital services, including digital identity verification, fraud prevention, and location intelligence solutions. Their business model focuses on developing data-driven services designed to assist their clients in securing digital interactions.

Potential implications and organizational risks

This claim of a data leak presents a significant risk of exposure for sensitive information held by GB Group. Because the organization is based in the United Kingdom, a confirmed breach of this nature could lead to serious legal proceedings and regulatory penalties under the UK GDPR framework. The specific mention of SQL Server files suggests that the attackers may have gained access to corporate databases, which is a critical component of many enterprise infrastructures.

Such a compromise can lead to secondary risks that extend beyond the immediate organization. If sensitive data is indeed leaked, it could create opportunities for identity theft or targeted phishing campaigns aimed at the organization's clients and employees. The potential for these cascading effects highlights why data breaches are treated with such high priority by cybersecurity professionals.

In the broader context of cyber threats, groups like Direwolf often employ double extortion tactics. In these scenarios, attackers do not just encrypt an organization's systems to disrupt operations; they also steal sensitive data to use as leverage. By threatening to release this data on a public leak site, they increase the pressure on the victim to meet their demands. This method is particularly effective against organizations that handle large volumes of sensitive client or corporate information.

To defend against such threats, organizations in the technology and data-driven sectors typically implement various defensive layers. These include robust access controls to prevent unauthorized database access, continuous monitoring of network traffic to detect exfiltration, and strict data encryption policies to ensure that even if data is stolen, it remains unreadable. Given that information about the Direwolf group remains limited in the public domain, organizations must remain vigilant against their evolving tactics.