Poliserv.ro targeted by Benzona ransomware group

• Ransomware group: Benzona
• Country: Romania
• Sector: Professional Services
• Announcement date: November 26, 2025

Benzona group claims data breach at Poliserv.ro

The ransomware group known as Benzona has listed the Romanian professional services company Poliserv.ro on its leak site. According to the announcement, the threat actor claims to have successfully compromised the organization's systems and is now threatening to publish sensitive information unless specific demands are met.

This type of activity is characteristic of modern ransomware operations, which often employ a double extortion tactic. In these scenarios, attackers do not merely encrypt an organization's files to disrupt operations; they also exfiltrate sensitive data to use as leverage. By threatening to leak the stolen information on public forums or dedicated leak sites, the attackers aim to pressure the victim into paying a ransom to prevent reputational damage and legal complications.

Details of the alleged attack and ransom demand

The threat actor published its announcement on November 26, 2025, claiming that the attack took place on the same day. The group has stated that they are demanding a ransom of $90,000 to prevent the publication of the alleged data. Publicly available information regarding the Benzona group remains limited, making it difficult to determine their specific tactics, techniques, or long-term objectives.

Regarding the specifics of the breach, the group claims that the volume of data involved is approximately 200 GB. However, the listing does not provide any detailed information regarding the specific content of the alleged leaked data, and no screenshots have been provided to substantiate the claims. The listing names no specific data types.

About Poliserv.ro

Poliserv is a professional services company based in Romania. The company provides technical support and consulting services across various industrial and commercial sectors.

Potential risks and organizational implications

If the claims made by the Benzona group are verified, the organization faces significant risks. There is a potential for the exposure of sensitive data belonging to the organization's clients and employees. Such a breach could lead to serious legal sanctions and administrative fines under the European Union's General Data Protection Regulation (GDPR).

Beyond legal consequences, the exposed data may be utilized by malicious actors as a tool for identity theft or for conducting targeted phishing attacks against the company or its partners. Furthermore, the organization may experience negative impacts on its commercial reputation. Because professional services firms often handle sensitive client information, a breach can create secondary risks regarding supply chain security for the various industrial and commercial sectors the company serves.

To mitigate such risks, organizations in the professional services sector typically focus on robust defensive measures. This includes implementing strict access controls, maintaining comprehensive logging and monitoring to detect unauthorized exfiltration, and ensuring regular, offline backups are maintained. Additionally, maintaining a strong incident response plan and ensuring compliance with regional data protection regulations are critical steps in managing the fallout of a potential cyberattack.