RansomHub ransomware group lists www.olanocorp.com on its leak site

• Ransomware group: RansomHub
• Country: Peru
• Sector: Transportation
• Announcement date: October 25, 2024

RansomHub claims data breach against Olanocorp

The RansomHub ransomware group has published an announcement on its dedicated leak site involving the Peruvian organization Olanocorp. According to the claim made by the threat actor group on October 25, 2024, the group has successfully gained access to the organization's internal data. This development follows a pattern of activity observed from the group, which has been known to target various sectors to exert pressure on victims.

The announcement appeared on the group's leak site, a platform commonly used by ransomware operators to host stolen data and pressure organizations into paying ransoms. These sites serve as a public stage for cybercriminals to showcase their successful intrusions, often providing a sense of visibility to their victims' operational vulnerabilities.

Details of the claimed intrusion

The RansomHub group's announcement, dated October 25, 2024, specifically identifies the victim as Olanocorp. The group claims to have breached the organization's systems and obtained access to sensitive information. The listing provided by the attackers includes details regarding the company's various subsidiaries and its different operational regions, suggesting an attempt to demonstrate the breadth of their access within the corporate structure.

While the group has claimed access to the organization's data, the specific nature and volume of the information involved remain unclear. The group has not provided detailed information regarding the specific nature of the allegedly leaked data. However, the group has provided a screenshot that references various file directories and certain corporate documents, which may indicate the types of internal structures they were able to observe during the intrusion.

Data types involved

The listing names no specific data types in a structured format.

About Olanocorp

Olanocorp is a company based in Peru that provides innovative solutions in the field of logistics and supply chain management. The organization focuses on optimizing transportation, warehousing, and distribution processes. Their primary business objective is to increase efficiency and reduce costs for their clients through these specialized logistical services.

Risk assessment and industry implications

This situation may pose significant risks to the organization's operational processes and its commercial reputation. Depending on the actual content of the leaked data, the exposure of employee or customer information could lead to serious consequences, such as identity theft and targeted phishing attacks. Such attacks often follow a data breach, as criminals use the stolen information to craft highly convincing messages to deceive individuals.

Furthermore, the organization may face legal responsibilities and potential administrative sanctions under Peruvian data protection regulations. When sensitive information is exposed, companies are often required to navigate complex regulatory frameworks regarding data privacy and mandatory breach notifications.

Given the history of RansomHub, it is assessed that the group may have employed double extortion tactics. Double extortion is a common ransomware strategy where attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information to threaten its public release. This dual-threat approach increases the pressure on the victim to comply with ransom demands. RansomHub, which emerged in early 2024 and reportedly ceased operations in early 2025, is known for incorporating former affiliates of the ALPHV group.

For organizations operating in the logistics and transportation sectors, maintaining robust cybersecurity posture is essential to protect supply chain integrity. Common defensive steps for organizations include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular security awareness training to mitigate the risk of phishing and unauthorized access.