inmobiliariamaspormenos.com targeted by Funksec ransomware group

• Ransomware group: Funksec
• Country: Spain
• Sector: Retail & E-Commerce
• Announcement date: January 31, 2025

Funksec claims a data breach at inmobiliariamaspormenos.com

The threat actor known as Funksec has listed the Spanish organization inmobiliariamaspormenos.com on its dedicated leak site. According to the announcement made on January 31, 2025, the group claims to have successfully gained unauthorized access to the organization's data. This type of announcement is a common tactic used in modern cyberattacks, where threat actors use leak sites to pressure victims by threatening to publish sensitive information if certain demands are not met.

The group has reportedly initiated a countdown following the announcement, a method often employed to increase psychological pressure on the targeted entity. While the group claims to have obtained various documents related to the organization's operations, no specific information was provided regarding the total size of the data stolen or the specific number of files involved. Furthermore, no ransom demand has been publicly disclosed by the group in relation to this specific incident.

Claimed data and affected information

The threat actor has provided evidence to support its claims through screenshots. These images allegedly display various documents that are part of the organization's internal operations. Based on the information provided by the group, the following types of data are claimed to be involved in the breach:

• Real estate project plans
• Corporate reports

The disclosure of such documents suggests that the breach may impact the internal administrative and operational workflows of the company. In many ransomware scenarios, attackers utilize a technique known as double extortion, where they not only encrypt the victim's systems but also steal sensitive data to use as leverage during negotiations.

About inmobiliariamaspormenos.com

inmobiliariamaspormenos.com is a real estate and property consultancy company based in Spain. The organization provides a range of professional services, including residential sales and rental services, catering to the Spanish property market.

Analysis and potential implications

The Funksec group is a relatively new entity in the cyber threat landscape, having emerged in late 2024. Reports indicate that this group utilizes AI-supported tools to facilitate their operations. The potential leakage of data from a real estate firm presents several significant risks. For a company operating in the property sector, the disclosure of trade secrets and customer data can lead to secondary risks that extend beyond the initial digital intrusion.

Because the organization is based in Spain, this incident may entail legal consequences under the European Union's General Data Protection Regulation (GDPR). The exposure of sensitive customer information can lead to risks of identity theft, which poses a long-term threat to the individuals involved. Additionally, if the claimed data is indeed published, the organization could face substantial reputational damage.

To mitigate such risks, organizations in the real estate and retail sectors typically focus on robust defensive measures. These include implementing multi-factor authentication, maintaining rigorous patch management schedules, and conducting regular employee training to prevent phishing. Furthermore, maintaining comprehensive data encryption and conducting regular backups are essential steps to ensure business continuity and protect sensitive client information from unauthorized access and subsequent exposure.