iRidge Inc. listed on fog ransomware leak site

• Ransomware group: fog
• Country: Japan
• Sector: Technology
• Announcement date: February 9, 2025

The technology company iRidge Inc. has been listed on the leak site of the threat group known as fog. This announcement, made by the group, indicates a potential data breach involving the organization.

The claimed attack and event details

The fog group published a post on its leak site on February 9, 2025, claiming that iRidge Inc. is a victim of their operations. According to the group's announcement, the attack is linked to the organization's digital infrastructure. The post made on February 9, 2025, also included other organizations alongside iRidge Inc., suggesting that the group may have targeted multiple entities during this period.

In many modern cyberattacks, ransomware groups employ a tactic known as double extortion. In this scenario, attackers do not merely encrypt an organization's files to disrupt operations; they also exfiltrate sensitive data before the encryption occurs. The threat of leaking this stolen information on a public leak site serves as additional leverage to pressure the victim into paying a ransom. While the specific motivations and future actions of the fog group remain unclear due to the limited public information available regarding their operations, such listings are a hallmark of their extortion methodology.

Data allegedly involved in the leak

The fog group claims to have obtained specific information from the organization's development environment. The group's announcement specifies the target of their data exfiltration, which focuses on the following:

• GitLab data

The group has not provided information regarding the total size of the data stolen or the specific number of files involved in the breach. Additionally, no ransom demand has been publicly stated by the group in relation to this specific listing.

About iRidge Inc.

iRidge Inc. is a technology company based in Japan. The organization specializes in several key areas of the digital economy, including mobile application development and digital marketing. Furthermore, the company provides OMO (Online Merges with Offline) solutions, which are designed to integrate digital and physical retail experiences. Their digital platforms are specifically developed to enhance customer experiences, particularly within the retail and service sectors.

Potential risks and organizational implications

The alleged leak of GitLab data poses significant risks to the organization, particularly regarding its intellectual property and software development processes. When data from a platform like GitLab is exposed, it can lead to the disclosure of sensitive source code or critical configuration files. Such exposure is dangerous because it can provide attackers with a roadmap of the company's software architecture, potentially facilitating secondary attacks against the organization or its clients.

Beyond the technical risks, the organization may face legal obligations under Japan's data protection regulations, specifically the Act on the Protection of Personal Information (APPI). Organizations operating in the technology and service sectors must maintain rigorous security postures to protect their proprietary code and client data. Common defensive steps for organizations include implementing strict access controls, utilizing multi-factor authentication, and conducting regular audits of version control systems to detect unauthorized access or unusual data movement.

Because information regarding the fog group is limited, it is not possible to make a definitive assessment regarding their specific motivations or their intended future actions following this announcement. However, the exposure of development environments remains a high-priority concern for the technology sector globally.