Peraso listed on Rhysida ransomware leak site

• Ransomware group: Rhysida
• Country: Canada
• Sector: Technology
• Announcement date: October 21, 2025

The Rhysida ransomware group has announced the listing of the technology company Peraso on its dedicated leak site. This announcement, made by the threat actor group, claims that the organization has been targeted in a cyberattack resulting in a data breach.

The claims made by Rhysida

On October 21, 2025, the Rhysida group published a notice via their own leak portal. In this announcement, the group claimed that data belonging to Peraso has been compromised. This type of public listing is a common tactic used by ransomware groups to pressure victims into meeting their demands.

Ransomware leak sites serve as a platform for cybercriminals to host information stolen during a breach. These sites are often used to shame organizations into paying ransoms. In this specific instance, the group has officially listed the company on their portal, marking the incident as a public data breach claim.

Details regarding the alleged data breach

Despite the public announcement made by the Rhysida group, the notice provided very little specific information regarding the incident. There was no detailed list of the compromised data provided in the announcement, and no specific ransom demand was disclosed by the attackers. Furthermore, the nature of the leaked or threatened data remains unknown, as no information regarding the specific content of the files was shared. No screenshots were provided to substantiate the claims made by the group.

• No specific data types were named in the listing.

About Peraso

Peraso is a technology company that develops high-performance Wi-Fi chipsets and software solutions for wireless data transfer. The company specializes in wireless connectivity solutions, with a particular focus on 60 GHz WiGig technology.

Impact and potential risks

This incident may lead to disruptions in the organization's operational processes and potential data privacy breaches. As the organization operates in Canada, violations of data protection obligations under PIPEDA may be considered. Given the double-extortion tactics of the Rhysida group, the alleged leaked data could potentially pose secondary risks. Risks such as identity theft or targeted phishing attacks may emerge for the organization's customers and employees. Information about this group is limited.

Double-extortion is a sophisticated ransomware tactic where attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information. The threat of leaking this data on a public site is used as additional leverage to ensure payment. This method shifts the threat from a simple availability issue to a significant confidentiality and privacy risk.

For organizations in the technology sector, such incidents highlight the importance of robust cybersecurity frameworks. Defensive measures often include maintaining rigorous backup protocols, implementing multi-factor authentication, and conducting regular security audits. Monitoring for unauthorized data exfiltration and maintaining strict access controls are also critical components of a modern defense-in-depth strategy to mitigate the risks posed by groups like Rhysida.