Hunters International claims encryption attack on FCC

• Ransomware group: Hunters
• Country: Spain
• Sector: Government & Defense
• Announcement date: April 30, 2025

Hunters International claims encryption attack on FCC

The ransomware group known as Hunters International has officially claimed responsibility for a cyberattack targeting the Spain-based organization FCC. According to an announcement published on the group's leak site on April 30, 2025, the threat actors claim to have conducted encryption activities on the systems belonging to the organization.

Details of the alleged attack

The incident was brought to public attention via a post published by Hunters International on April 30, 2025. In this announcement, the group included FCC on their target list and alleged that they have successfully performed data encryption operations on the organization's internal systems. This type of activity is a hallmark of ransomware attacks, where malicious actors gain access to a network and deploy software designed to lock files, rendering them inaccessible to the legitimate users.

Based on the information currently available from the group's announcement, the scope of the activity appears to be limited to encryption. While the group has admitted to performing encryption operations on the systems, current information suggests that no data exfiltration has occurred. This distinction is significant in cyber threat intelligence, as it separates pure encryption-based attacks from double extortion schemes where data is both locked and stolen.

Information regarding affected data

Regarding the specifics of the breach, the group has not provided detailed information concerning the nature of the files involved. The listing names no specific data types that have been impacted by the encryption process.

The lack of information regarding specific data types or the volume of files affected is a common occurrence in early-stage ransomware announcements. Organizations often face significant challenges in determining the exact scope of an incident during the initial phases of a breach response.

About FCC

Forum Communications Company, referred to as FCC, is a media and publishing company. The organization operates within the Upper Midwest region of the United States. It provides a variety of news and content services through several channels, including newspapers, television stations, and various digital platforms.

Impact assessment and organizational risks

The actions taken by Hunters International may have a significant negative impact on the operational continuity of FCC. When an organization's systems are encrypted, their ability to conduct daily business operations is often severely disrupted or halted entirely. This disruption can lead to service outages and significant downtime.

Because the organization is based in Spain, the incident carries potential legal implications. Any potential data loss or restrictions on data access could trigger formal legal processes under the General Data Protection Regulation (GDPR). Such regulations are designed to protect data privacy and impose strict requirements on how organizations handle and report potential breaches involving personal information.

It is worth noting that there have been reports suggesting that the Hunters International group had ceased encryption activities as of 2025. Therefore, this specific announcement may be a tactical move intended to exert pressure on the organization. Furthermore, the organization may face the risk of secondary extortion attempts as they move through their system recovery processes. In many ransomware scenarios, even if an organization successfully restores its systems from backups, threat actors may attempt to re-engage with the victim to demand further payments.

To mitigate such risks, organizations in the media and publishing sector often focus on robust backup strategies, network segmentation, and continuous monitoring to detect unauthorized encryption activities early. Maintaining a clear incident response plan is also vital for managing the legal and operational fallout of a potential breach.