RansomHouse ransomware group lists [EVIDENCE] Aishu, Eshoo on its leak site

• Ransomware group: RansomHouse
• Country: India
• Sector: Professional Services
• Announcement date: February 24, 2025

RansomHouse claims data theft from Aishu, Eshoo

The threat actor known as RansomHouse has listed the India-based entity Aishu, Eshoo on its dedicated leak site. According to the group's announcement, the cyberattack resulted in the exfiltration of approximately 0.5 TB of data from the organization's systems.

The incident was officially announced on the group's leak site on February 24, 2025. However, the group claims that the actual breach and data acquisition occurred much earlier, specifically on January 20, 2025. The announcement serves as a method of pressure, with the threat actors urging the organization's management to establish contact regarding the stolen information.

Details of the alleged data breach

The information provided by the threat actor includes specific references to the nature of the stolen files. The group has posted data samples to support their claims, organizing them under specific headings such as 'Evidence packs' and 'Project AnyBackup R&D'. These samples are intended to demonstrate the validity of the breach to both the victim and the public.

The content contained within these samples is claimed to include sensitive information related to the organization's research and development activities as well as other confidential corporate data. The specific types of data identified in the listing include:

• R&D data
• Confidential corporate data

No information was provided regarding the specific ransom demand or the exact file count involved in this incident.

About Aishu, Eshoo

Aishu is a technology company operating within the professional services sector. The organization specializes in providing a variety of critical IT solutions, including data management, backup, archiving, and cloud computing services. Aishu focuses on assisting enterprise customers during their digital transformation processes, helping them build data-driven organizations through these specialized technological solutions.

Analysis and potential impact

The alleged leak of such a significant volume of data poses substantial risks to the organization. The exposure of research and development data and confidential corporate information could jeopardize the company's intellectual property rights and trade secrets. Such a breach has the potential to weaken the organization's competitive advantage in the marketplace and may severely impact the trust established with its business partners.

RansomHouse has been observed since 2021, with a known focus on data exfiltration and extortion tactics. This history suggests that organizations targeted by such groups may face secondary risks, such as subsequent targeted phishing attempts or additional attacks. Furthermore, the organization may face legal obligations under Indian data protection regulations following the exposure of this data. The incident carries a high risk of significant reputational damage.

In general, ransomware attacks involving data exfiltration—often referred to as double extortion—aim to pressure victims by threatening to release sensitive information publicly if a ransom is not paid. To defend against such threats, organizations typically implement robust security measures, including regular offline backups, strict access controls, and continuous monitoring of network traffic to detect unauthorized data movement. Maintaining a strong incident response plan is also a critical component of modern cybersecurity defense strategies.