Relate Infotech listed on ElDorado ransomware leak site

• Ransomware group: ElDorado
• Country: United Kingdom
• Sector: Technology
• Announcement date: December 24, 2024

ElDorado ransomware group claims attack on Relate Infotech

The ElDorado ransomware group has announced the listing of data belonging to the technology company Relate Infotech on its leak site. This announcement, which surfaced on December 24, 2024, suggests a targeted operation against the firm. According to the information provided by the threat actor, the alleged attack occurred on the same day the listing was published.

Ransomware groups often utilize leak sites to exert pressure on their victims through a tactic known as double extortion. In these scenarios, attackers not only encrypt an organization's internal systems to disrupt operations but also exfiltrate sensitive data. If the ransom is not paid, the group threatens to publish the stolen information on these public platforms to damage the victim's reputation or force compliance through the threat of regulatory fines and loss of client trust.

Publicly available information regarding the ElDorado group remains limited, making it difficult to ascertain the full scope of their typical operations or their specific motivations. At this stage, the listing serves as a claim made by the group rather than a confirmed breach.

Details of the alleged data leak

Despite the announcement on the group's leak site, the threat actors have not provided specific details regarding the nature of the allegedly leaked data. No screenshots have been provided to verify the contents of the breach, and there is no information available regarding the total volume of data or the specific number of files involved. Furthermore, the group has not issued a ransom demand in relation to this specific claim.

The listing names no specific data types as being part of the breach.

About Relate Infotech

Relate Infotech is an international technology company that develops software for CRM, accounting, taxation, and company secretarial services. Operating as a subsidiary of Relate Software Development Limited, the firm provides a range of professional services including software development, quality assurance, and support services. Given its focus on financial and administrative software, the company plays a role in the digital infrastructure of various business operations.

Potential implications and risks

The claim made by ElDorado may pose significant risks regarding data protection regulations in the various regions where the company operates, including the United Kingdom, the European Union, the United States, and India. Because the company maintains a UK-based structure, the triggering of compliance processes under the UK GDPR may be expected following such an event.

Because Relate Infotech develops CRM and accounting software, the leaked data might potentially contain sensitive financial information belonging to its clients. Such a scenario could lead to secondary risks for the company's customers, including the possibility of identity theft or targeted phishing attacks. Furthermore, from a supply chain security perspective, other businesses that utilize the company's products could potentially be indirectly affected by this incident.

In the technology and software development sector, organizations often focus on implementing robust defensive measures to mitigate these types of risks. Common industry practices include maintaining rigorous patch management schedules, enforcing multi-factor authentication across all services, and conducting regular security audits. Additionally, implementing strict access controls and monitoring network traffic for unusual patterns can help detect unauthorized data exfiltration attempts before they escalate into significant breaches.