Ralord ransomware group lists ​​​​bettininformatica - suporteon company on its leak site

• Ransomware group: Ralord
• Country: Brazil
• Sector: Technology
• Announcement date: April 19, 2025

Ralord ransomware group claims breach of Bettin Soluções em Informática

The Ralord ransomware group has listed the Brazilian technology company Bettin Soluções em Informática on its leak site. According to an announcement made on April 19, 2025, the threat actors claim to have successfully compromised the company's systems, allegedly resulting in a significant data exfiltration event.

The attack is claimed to have taken place on April 16, 2025. While the group has published a notice regarding the breach, the specific ransom demand has not been disclosed in the available information. This type of activity is characteristic of modern ransomware operations, which often utilize a double extortion tactic. In such scenarios, attackers not only encrypt a victim's data to disrupt operations but also steal sensitive information to use as leverage, threatening to leak it on public forums if the ransom is not paid.

Details of the alleged data exfiltration

The Ralord group asserts that they have obtained a total of 15 GB of data from the systems belonging to Bettin Soluções em Informática. The threat actor claims that the stolen information is highly sensitive and includes various types of corporate and personal records. The post alleges that the compromised data encompasses payment records, backups, and customer information.

According to the group's announcement, the leaked content is expected to include a wide variety of file formats and data types. The specific items mentioned in the leak claim include:

• Payment records
• Employee information
• Customer information
• WhatsApp files
• Financial data
• Secret reports
• Certificates
• PDF files
• XLSX files
• DOC files
• Images
• Videos
• Income data
• Transaction records

It is important to note that the accuracy and the actual scope of the data claimed by the group have not yet been verified by any independent sources.

About Bettin Soluções em Informática

Bettin Soluções em Informática is a technology company based in Marília, Brazil. The organization provides a range of IT services and solutions, including computer maintenance and various other technical services to its clientele.

Potential implications and security considerations

This alleged breach may pose significant secondary risks to both the company and the individuals involved. For the employees and customers of Bettin Soluções em Informática, the exposure of personal and financial information could lead to identity theft and the execution of targeted phishing attacks. Furthermore, because the company operates within Brazil, a confirmed breach could trigger legal sanctions and administrative processes under the LGPD (General Data Protection Law).

Given that the organization functions as a technology service provider, this incident highlights potential implications for supply chain security. When a technology firm is compromised, the services they provide to other businesses may become a vector for further risk. Organizations in the technology sector typically focus on robust defensive measures to mitigate such risks, such as implementing multi-factor authentication, maintaining offline backups, and conducting regular security audits.

At this time, information regarding the Ralord group remains limited, and the claims made by the threat actor regarding the scale and nature of the data theft remain unverified.