Seidor targeted by TiMc group in alleged data breach

• Ransomware group: TiMc
• Country: Spain
• Sector: Professional Services
• Announcement date: April 9, 2026

The threat actor known as TiMc has published a leak announcement on a ransomware leak site, claiming to have compromised a significant amount of data belonging to Seidor. According to the announcement, the group alleges they have gained access to over 200 GB of information from the organization.

Details of the alleged attack

The claim regarding the breach against Seidor was announced on April 9, 2026. In the announcement, the TiMc group made specific allegations regarding the company's response to the incident. The threat actor claimed that the organization attempted to conceal the truth following the initial breach. This tactic is often observed in modern cyberattacks, where threat actors use public leak sites to pressure organizations into compliance by suggesting that the company is being non-transparent about the scope of the incident.

The group has indicated that they intend to release the stolen information publicly. According to the announcement, the data will be published once a countdown timer expires. This method is a common feature of double extortion ransomware campaigns, where attackers not only encrypt an organization's systems but also steal sensitive data to use as leverage for ransom demands. By using a countdown, the attackers create a sense of urgency and public pressure on the target organization.

Information involved in the leak

Regarding the specifics of the data that the TiMc group claims to have stolen, the announcement provides limited information. The listing names no specific data types, and there are no screenshots provided to verify the contents of the alleged breach. The group has only specified the volume of the data involved.

• Claimed data size: 200 GB

While the volume of the data is stated, the exact nature of the files remains unknown at this time. The lack of specific details or visual evidence makes it difficult to determine the exact impact on the organization's internal operations or the specific sensitivity of the files involved.

Organization profile

Seidor is an organization operating within the professional services sector. Based in Spain, the company provides various services to its clients, and the alleged breach of its systems could potentially impact its service delivery and client relationships.

Potential impact and industry implications

This incident suggests that sensitive corporate or client data within Seidor may be at risk of exposure. The claimed volume of data could potentially have negative impacts on the organization's operational continuity and reputation. When large volumes of data are threatened with public release, organizations often face significant challenges in managing their public image and maintaining the trust of their stakeholders.

Furthermore, the leaked information could potentially facilitate secondary risks such as identity theft or targeted phishing attacks. If personal information is part of the 200 GB of data claimed by TiMc, the organization may face legal sanctions under the General Data Protection Regulation (GDPR), which is applicable within the European Union. This regulation imposes strict requirements on how companies handle and protect personal data, and failures in data security can lead to significant regulatory consequences.

For organizations in the professional services sector, such incidents highlight the importance of robust cybersecurity frameworks. Common defensive steps include implementing multi-factor authentication, maintaining regular offline backups, and conducting frequent security audits to identify vulnerabilities. Additionally, maintaining a clear incident response plan is essential for managing the fallout of a potential breach and ensuring compliance with legal requirements regarding data protection and notification.

Information regarding the TiMc group remains limited, as the group's specific tactics, techniques, and procedures are not yet widely documented. As the situation develops, the industry will be watching to see if the claimed data is released and what the full extent of the impact on Seidor will be.