Telco Intercontinental listed by Hunters ransomware group

• Ransomware group: Hunters
• Country: United States
• Sector: Technology
• Announcement date: April 30, 2025

The ransomware group known as Hunters International has listed the technology company Telco Intercontinental on its leak site. The threat actor claims to have successfully exfiltrated data from the organization and has asserted that the company's systems have been encrypted.

The alleged attack and claims

According to the announcement made on April 30, 2025, the threat actor known as Hunters International alleged that data belonging to Telco Intercontinental was exfiltrated. In addition to the data theft, the group claimed that the organization's systems were encrypted during the course of the attack.

The group published the name of the company on its dedicated leak site to announce the incident. These claims suggest that the company's operational processes may have been disrupted as a result of the alleged intrusion. Ransomware attacks of this nature often involve a double extortion tactic, where attackers not only encrypt a victim's files to halt business operations but also threaten to leak sensitive information to pressure the organization into paying a ransom.

Details regarding the compromised data

While the announcement by the threat actor states that data was exfiltrated and encrypted, no specific details regarding the nature of the compromised data have been provided. The listing does not specify the volume of data taken or the specific types of files that were accessed during the breach.

Because the group has not provided further specifics, the exact scope of the information loss remains unconfirmed. In many such incidents, organizations must conduct thorough forensic investigations to determine exactly what information was accessed, whether it includes personally identifiable information, intellectual property, or internal corporate communications.

About Telco Intercontinental

Telco Intercontinental is a US-based technology company providing international telecommunications services and network solutions. The company focuses primarily on wholesale voice traffic, data transmission, and global connectivity services.

Analysis and potential implications

Hunters International is assessed to have emerged in 2023 and is believed to utilize the Hive ransomware codebase. Although the group has reportedly announced the cessation of encryption activities in 2025, such claims may indicate shifts in operational tactics rather than a complete halt.

Given that the company is based in the United States, a potential data breach could trigger legal processes under state-level data protection laws and federal regulations. The legal landscape for data protection in the US is complex, involving various state-specific statutes and federal oversight depending on the nature of the data and the industry involved.

Secondary risks associated with such an incident may include the potential use of compromised data for identity theft or targeted phishing campaigns. When sensitive organizational or client data is leaked, threat actors often use it to craft highly convincing social engineering attacks to target employees or customers.

For organizations operating in the technology and telecommunications sectors, maintaining robust defensive postures is critical. Common defensive steps include implementing multi-factor authentication across all systems, maintaining offline backups, and conducting regular security awareness training to mitigate the risk of initial access via phishing. Furthermore, continuous monitoring of network traffic and strict access controls can help detect and contain unauthorized movement within a network before encryption or exfiltration can occur.