Stormous group lists data allegedly belonging to enersolcr.com

• Ransomware group: Stormous
• Country: Costa Rica
• Sector: Energy & Utilities
• Announcement date: May 2, 2025

Stormous group claims data breach at enersolcr.com

The threat actor known as Stormous has listed data they claim belongs to enersolcr.com on their leak platform. This announcement, made on May 2, 2025, suggests that unauthorized access to the organization's internal systems and data may have occurred. While the listing appears on a ransomware leak site, the specific details regarding the total volume of files or the exact ransom demand have not been disclosed by the group.

The group, Stormous, is an entity that has been active since 2021. This group is recognized for claiming to have political motivations behind its cyberattacks. Such groups often utilize leak sites as a method of double extortion, where they not only encrypt an organization's data but also threaten to release sensitive information publicly to exert pressure. These public announcements are frequently intended to generate public attention or to force the victim into paying a ransom to prevent the disclosure of stolen information.

Details of the alleged data exposure

According to the claims made by the Stormous group, the breach involves a variety of sensitive information. The group asserts that they have gained access to internal system data and information pertaining to the organization's business partners. Furthermore, the leak allegedly includes significant amounts of customer-related information and administrative credentials.

The specific types of data mentioned in the claim include:

• Customer email addresses
• Customer names
• Customer phone numbers
• Partner data
• Administrator account information and roles

The exposure of such information, particularly administrator account details and roles, represents a significant security concern as it can be used to map out an organization's internal hierarchy and access controls.

About enersolcr.com

Enersol is an energy and utilities company based in Costa Rica. The company operates in the field of energy solutions and related infrastructure services. As an entity operating within the energy and utilities sector, the organization provides essential services that are critical to the local infrastructure.

Risk assessment and implications

The disclosure of the alleged data carries several significant risks for the organization and its stakeholders. For the customers of enersol, the exposure of names, email addresses, and phone numbers could lead to secondary risks, such as identity theft and targeted phishing attacks. These types of attacks often leverage stolen personal information to gain the trust of victims, making them more susceptible to fraudulent schemes.

From a legal and regulatory perspective, because the institution is based in Costa Rica, the organization may face legal consequences regarding compliance with local data protection regulations. Furthermore, the nature of the data involved—specifically the exposure of administrator and partner information—may weaken the organization's supply chain security, as attackers could potentially use this information to target the company's business partners or escalate privileges within the network.

The politically motivated nature of the Stormous group adds another layer of complexity, as their actions could result in a loss of reputation regarding the organization's operational reliability. In the energy and utilities sector, maintaining public trust and operational stability is paramount. Organizations in this sector typically focus on robust defensive measures, such as implementing multi-factor authentication, maintaining strict access controls, and conducting regular security audits, to mitigate the impact of such potential breaches and protect their critical infrastructure and customer data.