Professional Computer Co., Ltd. targeted by fog ransomware group

• Ransomware group: fog
• Country: Thailand
• Sector: Technology
• Announcement date: February 4, 2025

The threat actor known as fog has officially listed Professional Computer Co., Ltd. on its leak site, claiming to have exfiltrated sensitive data from the organization. According to the announcement made on February 4, 2025, the group asserts that the breach occurred around January 31, 2025. The threat actor claims that the leaked information is available via a 1 GB torrent link.

Details of the alleged attack

The fog ransomware group has published an announcement claiming that it has successfully breached Professional Computer Co., Ltd. The threat actor asserts that the stolen data includes Gitlab source codes allegedly belonging to the organization. Beyond the primary target, the group further claims that the leak contains data belonging to other entities, specifically naming X-Pans and Propulsion Academy AG.

In many modern ransomware campaigns, threat actors utilize a strategy known as double extortion. In these scenarios, attackers do not merely encrypt an organization's files to disrupt operations; they also exfiltrate sensitive data before the encryption process begins. The threat actor then uses the threat of leaking this stolen information on a public leak site to pressure the victim into paying a ransom. This tactic is designed to maximize leverage by targeting the organization's reputation and legal standing.

Data involved in the leak

The announcement specifically identifies the type of information that has been allegedly compromised. The threat actor claims that the following data types were stolen from the organization's Gitlab platform:

• Source code

While the group has provided a specific size for the total data package, no specific information was provided regarding the exact file count or the amount of ransom demanded in the announcement.

About Professional Computer Co., Ltd.

Professional Computer Co., Ltd. (PCC) is a Thailand-based IT solutions and systems integration company. The organization provides a wide range of technology services, including software development, network infrastructure, and IT consulting, to both public and private sector organizations.

Potential impact and industry implications

The alleged leak of source codes poses significant risks to the organization's intellectual property and trade secrets. When proprietary code is exposed, it can lead to the exploitation of vulnerabilities within the organization's software infrastructure by malicious actors, potentially creating further security risks for the company and its clients.

Because the organization is based in Thailand, the incident may result in legal consequences under local data protection regulations. Furthermore, the publication of such sensitive technical information could lead to a loss of reputation among the organization's clients and business partners. Publicly available information regarding the fog group remains limited.

For organizations operating within the technology and IT services sector, such incidents highlight the critical importance of robust security measures. Common defensive steps for organizations include implementing strict access controls for development platforms like Gitlab, utilizing multi-factor authentication, and maintaining comprehensive logging and monitoring to detect unauthorized data exfiltration. Additionally, organizations often employ regular security audits and vulnerability assessments to identify and patch weaknesses in their software infrastructure before they can be exploited by threat actors.