Kraken ransomware group lists www.pomerandboccia.com on its leak site

• Ransomware group: Kraken
• Country: Canada
• Sector: Professional Services
• Announcement date: July 15, 2025

Kraken claims data breach at Pomer & Boccia

The threat actor known as Kraken has listed the professional services firm Pomer & Boccia on its leak site. The group has made a claim regarding a data breach involving the organization, marking a new incident in the landscape of ransomware-driven extortion.

Ransomware attacks often involve a tactic known as double extortion. In these scenarios, attackers do not merely encrypt an organization's data to disrupt operations; they also exfiltrate sensitive information before the encryption occurs. The threat of leaking this stolen data on a public platform is used as leverage to pressure the victim into paying a ransom. While the specific mechanics of this particular incident remain under investigation, the listing on a leak site is a hallmark of this extortion strategy.

Details of the claim

According to the announcement made on July 15, 2025, the Kraken group claims to have successfully targeted the organization. The threat actor asserts that they have obtained data specifically related to the organization's debt recovery operations. Publicly available information regarding the specific tactics, techniques, and procedures of the Kraken group remains limited, making it difficult to ascertain the full scope of their operational capabilities.

The announcement was made on the same day as the claimed attack date, July 15, 2025. At this time, no specific details regarding the volume of data stolen or the total number of files involved have been disclosed by the group. Furthermore, no specific ransom demand has been published in the current listing.

Nature of the alleged data

The listing does not provide specific details regarding the exact nature or format of the leaked data. However, based on the professional activities of the organization, it is noted that the firm deals with debt recovery and manages various financial portfolios.

The listing names no specific data types.

About Pomer & Boccia

Pomer & Boccia is a professional services firm that has been in business since 1989. The company specializes in debt recovery services. It is based in Woodbridge, Ontario, Canada.

Risk assessment and industry implications

Given the organization's operations in debt recovery, it is possible that the alleged leaked data contains sensitive financial information. Such a breach could trigger legal obligations under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Furthermore, the exposure of such information could increase the risk of identity theft for the affected individuals.

Because the organization works with banking institutions and major corporations, this incident may raise concerns regarding secondary risks and potential supply chain attacks. The publication of sensitive data can also facilitate targeted phishing attacks against the affected parties, as attackers may use the stolen information to craft highly convincing fraudulent communications.

For organizations operating in the professional and financial services sectors, maintaining robust defensive postures is critical. Common defensive steps include implementing multi-factor authentication across all systems, maintaining regular offline backups, and conducting regular security awareness training for employees to recognize phishing attempts. Additionally, monitoring for unauthorized data exfiltration and maintaining strict access controls can help mitigate the impact of such breaches.