Keliweb allegedly targeted by vect ransomware group

• Ransomware group: vect
• Country: Italy
• Sector: Technology
• Announcement date: February 28, 2026

Vect claims data compromise of Keliweb

The technology firm Keliweb is alleged to have had its data compromised by the ransomware group known as vect. According to an announcement made on February 28, 2026, the group has listed a significant amount of data on its leak site, claiming the information belongs to the Italian organization.

Ransomware groups often utilize leak sites to pressure victims into paying ransoms. This tactic is frequently part of a double extortion strategy, where attackers not only encrypt a victim's systems but also threaten to publish sensitive information to damage the organization's reputation or force compliance. In this instance, the vect group has listed the data, and the announcement indicates that the organization is currently in a negotiation phase with the attackers.

Details of the alleged breach

The vect group has claimed to have exfiltrated 200GB of data belonging to Keliweb. While the volume of the data has been specified, the specific content and nature of the files remain unknown. There is no detailed information regarding the content of the leaked data, and no screenshots have been provided by the group to substantiate their claims.

The listing names no specific data types.

Information regarding the vect group remains limited in the public domain, making it difficult to ascertain the group's full capabilities or typical patterns of operation. The fact that the group is currently in a negotiation phase may suggest that the data has not yet been publicly released, but the threat of a leak may persist as long as negotiations remain unresolved.

About Keliweb

Keliweb is an Italy-based web hosting, cloud server, and domain registration service provider. It offers digital infrastructure solutions for individual and corporate clients. As a provider of digital infrastructure, the organization plays a role in supporting the online presence and technical operations of its various clients.

Potential impact and industry implications

This claim may negatively impact the organization's operational continuity and customer trust. Because Keliweb is based in Italy, the confirmation of a breach could lead to legal obligations under GDPR. The presence of personal information within a leak could lead to secondary risks such as identity theft and phishing attacks.

For organizations operating within the technology and hosting sector, maintaining robust security postures is critical to protecting client infrastructure. Common defensive steps for organizations include implementing multi-factor authentication, maintaining regular offline backups, and conducting frequent vulnerability assessments. Furthermore, ensuring strict adherence to data protection regulations is essential for managing legal risks following a potential incident.

The ongoing nature of the situation highlights the persistent threat posed by ransomware groups that use negotiation as a primary tool. Even when data is not immediately published, the mere threat of a leak serves as a significant lever for attackers. Organizations facing such threats must balance technical recovery with legal compliance and communication strategies to manage the potential fallout of a data compromise.