RelationMedia A/S listed on obscura ransomware leak site

• Ransomware group: obscura
• Country: Denmark
• Sector: Professional Services
• Announcement date: September 5, 2025

RelationMedia A/S targeted by obscura ransomware group

The Danish marketing and sales agency RelationMedia A/S has been listed on the leak site of a ransomware group known as obscura. According to the announcement made on September 5, 2025, the group claims to have successfully targeted the organization, leading to a data breach involving sensitive files.

Details of the claimed attack

The obscura group has published files on their leak site that they claim belong to RelationMedia A/S. Based on the announcement, the group alleges that the organization was locked on July 16, 2025. By publishing these files, the group claims to have made the organization's data publicly available to the world. It is important to note that public information regarding the specific methods and identity of the obscura group remains limited.

Ransomware attacks of this nature often follow a pattern of double extortion. In such scenarios, threat actors do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive data. The threat of releasing this stolen information on a public leak site serves as a powerful tool for extortion, aiming to exert maximum pressure on the victim organization to meet ransom demands. While the specific ransom demand and the total volume of stolen data were not disclosed in the announcement, the act of publication itself is a core component of the group's strategy.

Alleged data types involved

The files identified in the leak include various types of sensitive information. Based on the screenshots provided by the group, the following data types are allegedly included in the breach:

• Payslips
• Contracts
• Database backups
• Integration files

The presence of such diverse file types suggests a broad scope of the alleged intrusion, touching upon both administrative and technical infrastructure.

About RelationMedia A/S

RelationMedia A/S is a marketing and sales agency located in Denmark. The organization provides a wide range of professional services, including sales forces, merchandising, data collection, product presentation, and event management. Given its role in handling client data and managing various marketing operations, the organization maintains a significant amount of operational and personal information.

Analysis and potential impact

The data allegedly leaked may contain highly sensitive personal information belonging to employees, as well as critical operational data belonging to the company. Such a breach can lead to significant consequences, including the exposure of employees to identity theft and the disclosure of the organization's trade secrets. Because the organization operates within Denmark, this incident may be evaluated as a data protection breach under the General Data Protection Regulation (GDPR).

When organizations face such incidents, they must remain vigilant against secondary threats. The nature of the leaked data, particularly containing personal identifiers, often makes victims targets for follow-up phishing attacks. Threat actors may use the stolen information to craft highly convincing social engineering campaigns to further exploit the organization or its employees.

For companies operating in the professional services sector, maintaining robust security postures is essential. This includes implementing strict access controls, regular data backups, and continuous monitoring of network traffic to detect unauthorized exfiltration. Furthermore, organizations should ensure compliance with regional data protection laws to mitigate legal and regulatory risks following a potential breach. The methods used by groups like obscura, which focus on the public publication of data to create reputational and legal pressure, highlight the necessity for comprehensive incident response plans that account for both technical recovery and data privacy management.