Skip to content
Ransomware

MTTEXPERTISES.COM listed on Inc Ransom leak site

MTT Expertises has been listed on the leak site of the Inc Ransom ransomware group.

By
Siberpol Intelligence Unit
Published
3 min read
3 min read
  • Ransomware group: Inc Ransom
  • Country: Morocco
  • Sector: Technology
  • Announcement date: June 6, 2025

Inc Ransom claims data breach against MTT Expertises

The Inc Ransom ransomware group has listed data it claims belongs to MTT Expertises on its dedicated leak site. This announcement, which surfaced on the platform on June 6, 2025, indicates a potential data breach targeting the organization. The group has categorized the alleged data into three separate parts and has made them available for access on their leak platform.

Ransomware groups often utilize leak sites to host stolen information as part of their extortion process. When an organization refuses to meet the attackers' demands, these groups publish the data to increase public pressure and damage the victim's reputation. This tactic is a hallmark of modern cybercriminal operations, shifting the focus from simple encryption to the threat of public exposure.

Details of the alleged leak

While the listing is active, the specific nature of the stolen information remains unclear. The group has not provided details regarding the specific data types involved in this incident. Based on the available information from the leak site, the data is organized into three distinct parts, as shown in the group's announcement.

  • No specific data types are mentioned in the listing.

The lack of specific information regarding the file types or the volume of data makes it difficult to determine the full scope of the incident at this time. The group has not disclosed a ransom demand or the total size of the files they claim to possess.

About MTT Expertises

MTT Expertises is a professional firm with operations in both France and Morocco. The company specializes in providing high-level expertise in several critical areas, including asset valuation, risk management, and post-incident expertise. Since its founding in 2004, the organization has established itself as a provider of professional support to the insurance sector.

The firm utilizes a specialized team consisting of engineers and financial experts to deliver its services. Given its focus on risk management and professional expertise within the insurance industry, the organization operates in a sector where data integrity and confidentiality are of paramount importance.

Impact and risk assessment

The actions taken by the Inc Ransom group may pose a significant risk to the operational continuity of MTT Expertises. Because the group employs double-extortion tactics—where they both encrypt data and threaten to leak it—the organization faces pressure to comply with demands to prevent the public release of its information.

Since the company operates in France and Morocco, the leaked data may require a formal assessment under international data protection regulations, such as the General Data Protection Regulation (GDPR). The potential exposure of sensitive information can lead to secondary risks for the firm's clients and business partners, including the possibility of identity theft or the execution of targeted phishing attacks.

In such scenarios, organizations typically focus on several defensive and reactive steps. These include conducting thorough forensic investigations to determine the extent of the breach, notifying relevant regulatory authorities as required by law, and implementing enhanced monitoring to detect further unauthorized activity. For firms in the technology and professional services sectors, maintaining robust incident response plans is essential to mitigate the impact of such targeted extortion attempts.

The Inc Ransom group, which has been known to be active since mid-2023, continues to use these methods to target various organizations across different sectors.

From the Essential plan

Infostealer Detection

See your firm's attack surface on one screen: how many findings, at which severity, on which domain.

Related stories