Inter-American Tropical Tuna Commission listed on minteye ransomware leak site

• Ransomware group: minteye
• Country: United States
• Sector: Agriculture and Food Production
• Announcement date: December 12, 2025

Minteye claims data breach against IATTC

The Inter-American Tropical Tuna Commission (IATTC) has been listed on the leak site of the ransomware group known as minteye. This announcement, which appeared on December 12, 2025, marks a significant claim of a data breach against the international organization.

The minteye group alleges that they have successfully compromised the organization's systems. According to the announcement made on their leak site, the group claims to be in possession of data belonging to the IATTC. While the group has publicly claimed responsibility for the incident, information regarding this specific threat actor remains limited in the public domain, making it difficult to ascertain their specific operational patterns or long-term motivations.

Details of the alleged data theft

On December 12, 2025, the minteye group posted an announcement claiming that they have acquired a massive amount of information from the target. The group alleges that the volume of the compromised data reaches approximately 2.3 TB. This scale of data suggests a significant intrusion into the organization's digital infrastructure.

Despite the large volume of data claimed by the attackers, there is no detailed information regarding the specific content of the alleged leaked data. Furthermore, the group has not provided any screenshots to substantiate their claims or to demonstrate the nature of the files they have obtained. The listing names no specific data types or categories of information that have been compromised.

About the Inter-American Tropical Tuna Commission

The Inter-American Tropical Tuna Commission (IATTC) is an international organization responsible for the conservation and management of tuna and other marine resources in the eastern Pacific Ocean. The organization plays a critical role in the ecological and economic stability of the region by coordinating with member nations to regulate fishing activities. In addition to its regulatory functions, the IATTC conducts scientific research to ensure the sustainable management of marine life.

Potential implications and organizational risks

This alleged data breach may pose significant risks to the organization's operational continuity. When a massive volume of data is claimed to be stolen, the primary concern for an organization is the integrity of its ongoing operations. If the content of the data remains unclear, there is a potential for identity theft and targeted phishing attacks against employees or stakeholders of the organization.

Because the organization is based in the United States, a potential breach could trigger various notification obligations under relevant state laws and federal regulations. Such legal requirements often dictate how and when an organization must inform the public and regulatory bodies about a compromise of sensitive information. Additionally, the supply chain partners of the organization may also be subject to secondary risks resulting from this incident.

In the broader context of cybersecurity, ransomware attacks often involve a tactic known as double extortion. In these scenarios, attackers do not only encrypt an organization's data to disrupt operations but also steal sensitive information to use as leverage during ransom negotiations. The threat of leaking sensitive data on public sites is a primary driver of these extortion attempts. To defend against such threats, organizations typically implement multi-layered security strategies, including robust backup solutions, strict access controls, and continuous monitoring of their networks to detect unauthorized movements.

The limited information currently available regarding the methods and motivations of the minteye group makes it difficult to assess the full extent of the threat. For organizations operating in highly regulated sectors, the uncertainty following a leak site announcement can create significant challenges in determining the scope of the impact and the necessary remediation steps.