Lumina Americas targeted by 8base ransomware group

• Ransomware group: 8base
• Country: Mexico
• Sector: Technology
• Announcement date: April 29, 2024

8base claims data breach at Lumina Americas

The 8base ransomware group has published a listing on its leak site claiming responsibility for a data breach involving Lumina Americas. According to the announcement made on April 29, 2024, the threat actor group alleges to have exfiltrated sensitive information belonging to the company. The group has stated that various documents related to the organization's operations have been uploaded to their servers, a move intended to exert pressure on the organization through the public release of this data.

Ransomware groups often use leak sites to host stolen information as a method of coercion. This tactic is a hallmark of double-extortion campaigns, where attackers not only encrypt an organization's systems to disrupt operations but also steal sensitive data to threaten its public release. By publishing stolen files, these groups aim to damage a company's reputation and force them into paying a ransom to prevent further exposure.

The scope of the alleged data leak

The announcement from 8base claims that a wide variety of corporate and personal data has been compromised. The group alleges that the stolen information includes several types of sensitive documentation that could impact both the company's internal operations and the privacy of individuals associated with the firm. While the specific volume of data and the exact number of files have not been disclosed, the types of information mentioned are significant.

The data types allegedly included in the leak are:

• Invoices
• Receipts
• Accounting documents
• Personal data
• Certificates
• Employment contracts
• Confidentiality agreements
• Personal files

The presence of such diverse documentation suggests a broad reach into the company's administrative and human resources functions. The inclusion of personal files and employment contracts is particularly concerning for the privacy of the individuals involved.

About Lumina Americas

Lumina Americas is a technology and consulting services company based in Latin America. The firm maintains a significant regional presence with offices located in Argentina, Mexico, and Spain. Lumina Americas provides digital transformation and technology solutions to various businesses operating throughout the region.

Analysis and potential impact

The 8base group is a known threat actor that has been active since 2022. They are recognized for employing double-extortion tactics, which combine the disruption of digital services with the threat of data exposure. The alleged presence of personal data and employment contracts in this leak may increase the risk of identity theft or targeted phishing attacks directed at the company's employees and customers.

Because Lumina Americas operates across multiple jurisdictions, including Argentina, Mexico, and Spain, the company may face legal and administrative sanctions under the General Data Protection Regulation (GDPR) and other relevant local data protection regulations. The exposure of sensitive business and personal information can lead to significant legal liabilities and regulatory scrutiny.

Furthermore, the incident could cause damage to the company's commercial reputation and negatively impact its operational continuity. It is worth noting that the group's infrastructure was disrupted in early 2025, which suggests that its operational capacity may have shifted. For organizations in the technology and consulting sector, maintaining robust security postures is essential to mitigate these risks. Common defensive steps include implementing strict access controls, conducting regular security audits, and ensuring comprehensive encryption for data at rest and in transit to protect against unauthorized exfiltration.