Informatika A.D. listed on worldleaks leak site following alleged data breach

• Ransomware group: worldleaks
• Country: Serbia
• Sector: Technology
• Announcement date: June 25, 2025

A claim of data exfiltration by worldleaks

The technology company Informatika A.D. has been listed on a leak site by the threat actor known as worldleaks. The group has made a claim regarding a data breach involving the organization, asserting that they have successfully exfiltrated data belonging to the company. This announcement was published on the group's leak site on June 25, 2025, although the group cites the actual incident date as May 23, 2025.

In the landscape of modern cyber threats, such listings are a common tactic used by various threat actors. These groups often utilize dedicated leak sites to pressure victims by threatening to release sensitive information. This method is frequently associated with extortion-based business models, where the primary goal is to leverage stolen data to demand payment from the targeted organization.

Details of the alleged incident

Regarding the specifics of the claim made by worldleaks, there is currently a lack of granular detail available to the public. While the group has officially listed Informatika A.D. on their platform, they have not provided supporting evidence such as screenshots or detailed documentation to verify the nature or the specific content of the alleged leaked data. Furthermore, there is no information available regarding the total volume of data stolen or the specific number of files involved in the incident.

The listing does not specify any particular categories of information that have been compromised. Consequently, the listing names no data types.

About Informatika A.D.

Informatika A.D. is an information technology company based in Serbia. The organization operates within the technology sector, providing a variety of specialized services to both public and private sector organizations. Their service portfolio includes software development, system integration, and the provision of IT infrastructure solutions.

Risk assessment and industry implications

This incident may pose significant risks to the operational continuity and data privacy of Informatika A.D. Depending on the nature of the compromised data, secondary risks may emerge. These secondary threats often include identity theft or the execution of targeted phishing attacks directed at the organization's employees and customers.

Because the organization operates within Serbia, this incident may trigger legal processes under the data protection regulations applicable to entities operating within that jurisdiction. Organizations in the technology and service provider sectors must remain vigilant, as a breach in such companies can have cascading effects on their clients.

Publicly available information regarding the worldleaks group is limited. However, it is reported that the group focuses solely on data exfiltration and extortion. When faced with such threats, organizations typically need to review their data security processes and determine if they must make necessary notifications regarding a potential data breach. Common defensive measures for organizations include implementing robust encryption, maintaining strict access controls, and conducting regular security audits to mitigate the risk of unauthorized data exfiltration.