Relate Infotech listed on Blacklock ransomware leak site

• Ransomware group: Blacklock
• Country: India
• Sector: Technology
• Announcement date: May 16, 2025

Blacklock claims data breach at Relate Infotech

The Blacklock ransomware group has listed the technology company Relate Infotech on its dedicated leak site, alleging that the organization has been the victim of a data breach. This announcement, made on May 16, 2025, marks a new development in the group's activities as they target various organizations through public shaming and extortion tactics.

Ransomware leak sites are platforms used by cybercriminal groups to pressure victims into paying ransoms. These sites often feature lists of compromised organizations, sometimes accompanied by samples of stolen data. By publishing these names, threat actors aim to damage the reputation of the victim and increase the pressure to comply with their demands. This tactic is a cornerstone of modern ransomware operations, moving beyond simple encryption to focus on the threat of public data exposure.

Details of the alleged attack

According to the claims made by the Blacklock group, the attack against Relate Infotech allegedly took place on December 24, 2024. This suggests that the breach may have occurred significantly earlier than the public announcement on the leak site. The threat actor has indicated that they are utilizing encrypted messaging platforms in an attempt to establish communication with the victim organization.

While the group has claimed a breach has occurred, they have not provided specific details or sample files regarding the content of the alleged leaked data. Consequently, the exact nature of the information involved remains unverified. The listing names no specific data types or categories of information that have been compromised.

About Relate Infotech

Relate Infotech is an international technology company specializing in the development of software for various business functions, including accounting, CRM, taxation, and company secretarial services. The company operates as a subsidiary of the Ireland-based Relate Software Development Limited. Through its operations in India, Relate Infotech manages critical business processes such as software product development, quality assurance, and technical support services.

Analysis and potential implications

This incident suggests that the organization's operational data and information related to its software solutions may be at risk. For an organization with operations in India, this could create pressure on regulatory compliance processes in other regions where it operates, such as Ireland, the UK, and the US. If the breach claims are verified, there may be a risk of supply chain attacks for third-party customers using the organization's CRM and accounting software.

Ransomware groups often prefer double extortion methods, where they not only encrypt an organization's data but also threaten to leak it publicly to maximize leverage. This approach forces organizations to consider not just the recovery of systems, but also the long-term consequences of data exposure. Because of this, organizations and their stakeholders may need to remain vigilant against identity theft and targeted phishing attacks that often follow such breaches.

In the technology sector, particularly for companies providing essential business software, the potential for downstream impact is significant. When a software provider is compromised, the security of its entire customer base may be called into question. Organizations in this sector can mitigate such risks by implementing robust security frameworks, maintaining strict access controls, and ensuring continuous monitoring of their development and support environments. Furthermore, maintaining clear communication channels and having a well-rehearsed incident response plan are vital steps for managing the fallout of a potential supply chain compromise.