Tiger Communications targeted by Securotrop ransomware group

• Ransomware group: Securotrop
• Country: United Kingdom
• Sector: Technology
• Announcement date: July 29, 2025

Securotrop claims data breach at Tiger Communications

The threat actor group known as Securotrop has published an announcement on its leak site, claiming to have stolen and leaked a significant volume of data belonging to Tiger Communications. According to the group's announcement, the breach involves a substantial amount of information, which they claim was released following a failure by the target organization to communicate with them regarding their demands.

The incident was officially announced on a leak site on July 29, 2025. While the announcement was made in late July, the group alleges that the actual attack occurred earlier, specifically on July 18, 2025. This discrepancy between the attack date and the public disclosure is a common occurrence in ransomware operations, where attackers may spend time exfiltrating data or negotiating before moving to the public leak phase.

The scale of the alleged theft is considerable. The group claims to have compromised a total of 196,061 files. This massive collection of data is reported to have a total size of approximately 243.30 GB. Such large-scale exfiltration is a hallmark of modern ransomware campaigns, where the goal is to maximize leverage over the victim through the threat of public exposure.

Details of the alleged data exfiltration

The information released by Securotrop reportedly contains a wide variety of sensitive documents and personal details. The group claims that the leaked dataset includes highly confidential information that could impact both the company's internal operations and the privacy of its stakeholders. The specific types of data mentioned in the group's claim include:

• Customer contracts
• Employee payroll
• Employee contact information
• Employee credit card details
• Bank account information
• Legal documents

Beyond the specific list provided, the group also alleged that the stolen data contains employee names and phone numbers, bank balances, vehicle information, manager contact details, and computer audit reports. The inclusion of such diverse data types—ranging from financial records and legal documents to technical audit reports—suggests a comprehensive breach of the organization's digital environment.

Organizational profile of Tiger Communications

Tiger Communications is a technology company operating within the telecommunications sector. The organization specializes in the development of software designed for call accounting, analytics, and cost management. Their solutions are utilized by businesses to help optimize communication costs and to monitor network performance, making them a provider of critical infrastructure tools for the telecommunications industry.

Analysis and implications of the incident

This incident represents a significant risk to the privacy of individuals associated with Tiger Communications. The exposure of sensitive personal data belonging to both employees and customers could lead to severe consequences. Given that Tiger Communications is based in the United Kingdom, this breach potentially constitutes a violation of data protection obligations under the UK GDPR. The release of financial data and credit card details specifically increases the risk of identity theft and fraudulent activities for the affected individuals.

Furthermore, the publication of corporate legal documents and computer audit reports could have a lasting impact on the company's commercial reputation. When sensitive internal audits and legal agreements are made public, it can undermine trust with partners and clients. The group's decision to leak the data after a lack of communication suggests the use of double extortion tactics. In these scenarios, attackers not only encrypt systems to disrupt operations but also steal data to pressure the organization into paying a ransom to prevent the public release of information.

While information regarding the Securotrop group remains limited, their actions indicate an attempt to exert pressure on the company's operational continuity. For organizations in the technology and telecommunications sectors, such incidents highlight the necessity of robust data protection strategies. Defensive measures typically include implementing strict access controls, maintaining comprehensive audit logs, and ensuring that sensitive data, such as payroll and customer contracts, is encrypted both at rest and in transit. Additionally, having a well-defined incident response plan is critical for managing the fallout of a potential data leak and meeting regulatory notification requirements.