Megacentro listed on Hunters International leak site following alleged data breach

• Ransomware group: Hunters
• Country: Chile
• Sector: Retail & E-Commerce
• Announcement date: March 20, 2025

Hunters International claims data exfiltration at Megacentro

The ransomware group known as Hunters International has officially listed the Chilean organization Megacentro on its dedicated leak site. According to the announcement made on March 20, 2025, the threat actors claim to have successfully exfiltrated sensitive information from the company's systems. This development marks a significant incident for the organization, as the group's public listing typically serves as a method of pressure during extortion attempts.

The details provided by the group indicate a specific shift in their operational methodology. While the group has claimed responsibility for the breach, they noted that the organization's systems were not encrypted during this particular incident. This highlights a trend in modern cyberattacks where the primary objective is the theft of information rather than the disruption of services through encryption. This approach, often referred to as pure data exfiltration, focuses on the sensitive nature of the stolen information to leverage pressure against the victim.

Hunters International is a group that first emerged in 2023. Security researchers have observed that the group is believed to be derived from the Hive source code. Notably, the group has reportedly announced the cessation of its encryption activities in 2025, which aligns with the nature of this reported incident where no encryption was mentioned.

Details of the alleged data theft

The information released by the threat actors provides specific metrics regarding the volume of the data they claim to have stolen. According to the leak site, the breach involves a substantial amount of information that could potentially impact the organization's privacy and security posture. The group has provided the following details regarding the stolen data:

• Total data size: 187.1 GB
• Total file count: 280,508 files

Despite the specific numbers provided regarding the size and quantity of the files, the group has not provided a detailed list regarding the specific types of data leaked. The listing does not specify whether the files contain personal identification, financial records, or internal corporate documents, leaving the exact nature of the compromised content unknown at this time.

About Megacentro

Megacentro is a real estate and logistics company based in Chile. The company provides a variety of essential services for businesses, including the rental of storage, office, and industrial spaces. Given its role in the logistics and real estate sectors, the company serves as a critical link in the supply chain and business operations for its clients.

Risk assessment and organizational implications

This incident may pose a risk primarily to data confidentiality rather than operational continuity. Because the group did not encrypt the systems, the organization's ability to continue daily operations may remain intact; however, the exposure of sensitive information presents a different set of challenges. Depending on the content of the allegedly exfiltrated data, the exposure of employee or customer information could facilitate identity theft and targeted phishing attacks.

The group's strategy of focusing on data exfiltration without encryption may increase the risk of secondary extortion attempts or the sale of data to third parties on dark web marketplaces. Furthermore, the organization may face legal obligations under Chilean data protection regulations due to the potential exposure of sensitive information. Such incidents often require organizations to navigate complex regulatory landscapes regarding mandatory breach notifications.

In such scenarios, it is generally suggested that organizations conduct a thorough forensic investigation to determine the full scope of the breach and notify the relevant authorities. For companies in the retail and logistics sectors, maintaining robust data protection measures and monitoring for unauthorized data movement is a critical component of a modern cybersecurity defense strategy. Organizations often implement various defensive steps, such as network segmentation, strict access controls, and continuous monitoring of data egress, to mitigate the risks associated with exfiltration-focused attacks.