Kraken ransomware group lists www.humac.dk on its leak site

• Ransomware group: Kraken
• Country: Denmark
• Sector: Technology
• Announcement date: June 28, 2025

Kraken ransomware group claims data breach at Humac

The Kraken ransomware group has officially listed the Danish technology company Humac on its dedicated leak site. This announcement, made on June 28, 2025, constitutes an allegation by the threat actor group that they have successfully gained unauthorized access to the company's internal systems. The group's listing follows a claimed attack date of April 2, 2025, suggesting a potential period of undetected presence within the network prior to the public announcement.

Ransomware groups often utilize leak sites as a component of a double extortion strategy. In these scenarios, attackers do not merely encrypt a victim's data to disrupt operations; they also steal sensitive information to use as leverage. By threatening to publish stolen data on a public platform, the group attempts to pressure the organization into paying a ransom to prevent the exposure of proprietary or customer information. Such tactics increase the psychological and reputational pressure on the target organization.

Details of the alleged incident

The announcement provided by the Kraken group regarding the breach at Humac remains limited in scope. While the group has claimed a data breach has occurred, the listing does not provide specific details or file samples regarding the nature of the data allegedly leaked. Furthermore, the announcement does not include information regarding the total volume of data stolen or the specific number of files involved in the incident.

The listing names no specific data types that have been compromised during the alleged attack.

About Humac

Humac is a technology company based in Denmark that has been in operation since 1989. The organization serves as an authorized Apple reseller and service provider. The company specializes in a variety of services related to the Apple ecosystem, including the direct sales of products, the provision of technical support, and the development of enterprise-level solutions for Apple products.

Analysis and potential implications

Publicly available information regarding the Kraken group remains limited, making it difficult to assess the full scope of their typical operations. However, the nature of Humac's business as an Apple Premium Partner introduces specific concerns. Because the company handles sales and technical services, the leaked data may contain sensitive information such as customer contact details or purchase history.

The potential impact of this incident extends across several dimensions. From a legal perspective, since the company operates within Denmark, a confirmed data breach could trigger formal legal processes under the General Data Protection Regulation (GDPR). For the customers of Humac, a breach could result in secondary risks, including the threat of identity theft or the occurrence of targeted phishing attacks using the stolen information.

Furthermore, Humac's position within the technology supply chain suggests that such a breach could potentially impact a wider ecosystem. When a service provider or a specialized reseller is compromised, the interconnected nature of modern business environments means the ripple effects can reach various partners and clients. Organizations operating in similar sectors often implement defensive measures such as multi-factor authentication, rigorous patch management, and continuous monitoring to mitigate these types of risks.

General defensive considerations

In response to the evolving landscape of ransomware and data extortion, organizations are increasingly focusing on robust cybersecurity frameworks. Common defensive steps include:

• Implementing strict access controls to limit the movement of attackers within a network.
• Maintaining regular, offline backups to ensure data can be restored without paying ransoms.
• Conducting regular security awareness training to help employees identify phishing attempts.
• Employing advanced threat detection systems to identify anomalous behavior on the network.

As the threat of data exfiltration grows, the reliance on these defensive layers becomes critical for maintaining both operational continuity and customer trust.