Skip to content
Ransomware

OpenEyes Technologies Inc. listed on radar ransomware leak site

Data allegedly belonging to OpenEyes Technologies Inc. and OpenEyes Software Solutions Pvt. Ltd. has been listed on the leak site by the radar group.

By
Siberpol Intelligence Unit
Published
3 min read
3 min read
  • Ransomware group: radar
  • Country: United States
  • Sector: Technology
  • Announcement date: October 29, 2025

The radar ransomware group has officially listed OpenEyes Technologies Inc. and OpenEyes Software Solutions Pvt. Ltd. on its leak site. The threat actor group claims to be in possession of confidential data belonging to these two entities, marking a new potential data breach incident involving the technology sector.

The details of the claim

According to the announcement made on October 29, 2025, the radar group asserts that it has successfully exfiltrated sensitive information from the mentioned organizations. The group's announcement appeared on its dedicated leak site on the same day the attack was allegedly carried out. While the group has publicly acknowledged the targeting of these specific entities, the announcement remains relatively sparse regarding the technical specifics of the intrusion.

In many modern ransomware campaigns, threat actors utilize a tactic known as double extortion. In this scenario, attackers do not merely encrypt an organization's systems to disrupt operations; they also steal sensitive data to use as leverage. By threatening to release this data on a public leak site, the attackers aim to pressure the victim into paying a ransom to prevent the exposure of proprietary or personal information. This method increases the pressure on organizations, as the threat of a data leak can cause significant reputational and regulatory damage even if the organization's backups allow for a quick recovery from the initial encryption.

The nature of the alleged data leak

Despite the listing on the leak site, the specific nature and scope of the data involved in this incident remain unclear. The radar group has not provided a detailed file list, nor have they provided any screenshots to substantiate the contents of the alleged theft. Furthermore, no information has been provided regarding the total volume of data stolen or the specific file count involved in the breach.

The listing names no specific data types or categories of information that have been compromised.

About OpenEyes Technologies Inc.

OpenEyes Technologies Inc. is an IT company that specializes in providing software development and various technology solutions. The organization is headquartered in Washington, D.C., USA. In addition to its primary headquarters, the company maintains operational offices located in India, indicating a global footprint in the technology services market.

Potential risks and organizational implications

This incident may pose potential risks to the operational continuity and data privacy of the organizations involved. Depending on the actual content of the allegedly leaked data, the exposure of employee or customer information could lead to identity theft and targeted phishing attacks. Such attacks often follow a breach, where stolen credentials or personal details are used to deceive individuals or gain further access to corporate networks.

Because the organizations maintain operations in both the United States and India, the incident may trigger legal processes under relevant data protection regulations. This could include compliance requirements under the GDPR or various local privacy laws depending on the specific jurisdictions and the nature of the data handled. The legal and regulatory landscape for data protection is increasingly complex, and a confirmed breach often necessitates formal notification to regulatory bodies and affected parties.

For organizations operating within the technology sector, maintaining robust data security processes is essential. Common defensive steps to mitigate such risks include implementing multi-factor authentication, maintaining offline backups, and conducting regular security audits. If a breach is confirmed, organizations may need to review their internal data security protocols and fulfill their legal obligations to notify affected stakeholders to mitigate further harm.

From the Essential plan

Third-Party Risk

Monitor leaks on your suppliers’ domains and identify at-risk suppliers at an early stage.

Related stories