Italtel Peru listed on Everest ransomware leak site

• Ransomware group: Everest
• Country: Peru
• Sector: Technology
• Announcement date: September 1, 2026

Everest ransomware group claims breach of Italtel Peru

The ransomware group known as Everest has officially listed the technology firm Italtel Peru on its dedicated leak site. According to the announcement made on September 1, 2026, the threat actor group claims to have successfully breached the organization and obtained access to its internal data. This development follows the group's pattern of using public pressure to target victims, a tactic commonly associated with modern ransomware operations.

The group has reportedly initiated a countdown process, a common psychological tactic used by ransomware operators to create a sense of urgency. This countdown is intended to pressure the victim organization into establishing contact with the attackers before the promised deadline. While the group has made these claims, the full extent of the breach and the validity of the stolen data remain subject to the group's assertions.

Details of the alleged data theft

The announcement provided by the Everest group suggests a significant breach of corporate information. According to the claims made on the leak platform, the attackers have gained access to a wide variety of sensitive records. The group asserts that the compromised data repository includes several critical categories of information that are vital to the company's operations and business relationships.

Based on the information provided in the leak site announcement, the following types of data are allegedly involved in the breach:

• Project records
• Commercial data
• Legal records
• Engineering data
• Operational records

Furthermore, a screenshot provided by the group indicates that the volume of the allegedly compromised data is substantial, consisting of approximately 71,000 files. No specific information was provided regarding the total size of the data repository or the specific ransom demand required to prevent the release of this information.

About Italtel Peru

Italtel Peru is a technology company that operates within the telecommunications and digital transformation sectors. As a member of the Italy-based Italtel group, the company provides a specialized range of services including network infrastructure and software solutions. Their professional scope covers telecommunications networks, system integration, and various digital transformation services tailored for corporate clients.

Impact and security implications

The actions taken by the Everest group pose significant risks to the operational continuity and commercial reputation of Italtel Peru. Because the group has been active since 2020, they are recognized for using data exfiltration and extortion methods to exert pressure on targeted organizations. This specific method, often referred to as double extortion, involves stealing sensitive data before encrypting systems, allowing the attackers to threaten the public release of information if a ransom is not paid.

Given the sensitive nature of the allegedly compromised data—which includes engineering, legal, and commercial records—secondary risks are a major concern. These risks include the potential for targeted phishing campaigns or identity theft directed at the company's clients and business partners. Such secondary attacks can extend the impact of the breach far beyond the initial victim, potentially compromising the security of the entire supply chain.

From a regulatory standpoint, the company may face significant legal obligations under the data protection regulations applicable in Peru. Organizations operating in the technology and telecommunications sectors should remain vigilant against such threats. General defensive strategies for organizations include maintaining robust backup protocols, implementing strict access controls, and ensuring continuous monitoring of network traffic to detect unauthorized data exfiltration. As seen in this case, the impact of a breach can ripple through a company's professional network, making proactive supply chain security a critical component of modern cyber defense.