Skip to content
Ransomware

Global Go listed on killsec leak site

Global Go, a company in the transportation sector, has been listed on the leak site by the killsec group.

By
Siberpol Intelligence Unit
Published
3 min read
3 min read
  • Ransomware group: killsec
  • Country: Peru
  • Sector: Transportation
  • Announcement date: August 23, 2026

The killsec group claims a breach at Global Go

The transportation and logistics services company Global Go has been listed on a ransomware leak site by the threat actor known as killsec. The announcement, which appeared on August 23, 2026, indicates that the group has targeted the Peruvian organization. While the listing confirms the group's intent to publish the institution's data, the specific details regarding the nature of the incident remain limited to the group's public claim.

In ransomware leak site announcements, threat actors often list victims to pressure them into paying a ransom. This specific listing by killsec follows a pattern seen in modern cyberattacks, where the threat of data exposure is used as a primary leverage tool. At this time, the group has not specified a ransom amount, nor have they provided information regarding the total volume of data involved in the alleged breach.

Details regarding the claimed data

The listing provided by the killsec group does not contain specific information regarding the nature of the leaked data. The available documentation, such as screenshots provided by the group, contains only general statements regarding their operational activities rather than specific details about the stolen files. Furthermore, the listing names no specific data types that have been compromised.

In many such incidents, the lack of immediate detail regarding data types is common during the initial stages of a leak site announcement. Threat actors may withhold specific information to maintain leverage or may simply have not yet categorized the stolen assets. However, the absence of information regarding the exact data types or the total file count means the full scope of the potential exposure remains unknown to the public at this stage.

About Global Go

Global Go is a company based in Peru that operates within the transportation and logistics sector. The organization provides various solutions for both urban and intercity transportation, serving as a key provider of logistics and movement services within its region.

Potential impact and organizational risks

The situation involving Global Go may lead to significant disruptions in the company's operational continuity and a potential loss of reputation. Depending on the actual content of the data, if any is eventually released, secondary risks may arise for both the institution's employees and its customers. These risks include the possibility of identity theft or the deployment of targeted phishing attacks against the individuals associated with the company.

Furthermore, the institution may face legal obligations under the existing data protection regulations within Peru. The regulatory landscape often requires organizations to report breaches and mitigate risks to protect the privacy of their stakeholders.

The killsec group, which emerged in 2023, is noted for having hacktivist origins before transitioning into a ransomware-as-a-service model. Their current tactics, as suggested by this listing, indicate the adoption of double extortion. In a double extortion scheme, attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information to threaten its public release. This dual pressure is designed to maximize the likelihood of a ransom payment.

For organizations in the transportation and logistics sector, maintaining robust cybersecurity postures is essential to prevent such incidents. Common defensive strategies include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular security awareness training for employees to defend against phishing. Ensuring compliance with local data protection laws is also a critical component of managing the legal and reputational risks associated with potential data breaches.

Threat Intelligence

Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.

Related stories