V² Development listed on datacarry leak site

• Ransomware group: datacarry
• Country: Greece
• Sector: Technology
• Announcement date: June 4, 2025

The claim by datacarry

The threat actor known as datacarry has officially listed the technology firm V² Development on its leak site. According to the announcement made on June 4, 2025, the group alleges that they have successfully compromised data belonging to the organization. The group claims that the breach or the initial intrusion occurred on May 28, 2025.

Ransomware groups often utilize leak sites to exert pressure on their victims through a tactic known as double extortion. In these scenarios, attackers do not merely encrypt a company's systems to disrupt operations; they also exfiltrate sensitive information. If the ransom is not paid, the attackers threaten to publish the stolen data on these public platforms to maximize reputational damage and operational pressure. While the listing on the leak site is a significant development, it remains a claim made by the threat actor.

Details of the alleged data breach

Despite the listing of V² Development on the datacarry leak site, the group has been uncooperative in providing specific details regarding the nature of the compromise. At this time, no information or screenshots regarding the nature of the alleged leaked data have been provided by the attackers.

The listing names no data types.

Potential secondary risks

When a data breach occurs, even without specific details on the file types, several secondary risks often emerge. Depending on the nature of the compromised data, there may be risks such as identity theft or targeted phishing attacks aimed at the employees and customers of the affected organization. Such attacks often leverage the stolen information to gain further access or to conduct fraudulent activities.

About V² Development

V² Development is a software development and technology company based in Greece. The company provides custom software solutions, web development, and digital transformation services. As a provider of digital services, the company operates within the technology sector, managing various client requirements and digital infrastructures.

Analysis and implications

This incident may indicate potential vulnerabilities in the organization's data security processes. The publication of an organization's data can lead to significant reputational damage and cause various operational disruptions. Furthermore, because the organization operates in Greece, data breach notification requirements and administrative fines under the General Data Protection Regulation (GDPR) may be applicable.

Information regarding the datacarry group remains limited, making it difficult to attribute the attack to a specific known entity with high confidence. For organizations operating in the technology and software development sector, maintaining robust security postures is critical to preventing such incidents. Common defensive steps for organizations typically include implementing multi-factor authentication, maintaining regular offline backups, and conducting frequent vulnerability assessments to identify and patch weaknesses before they can be exploited by threat actors.

• Reputational impact: Publicly listing a company can damage its standing with clients and partners.
• Regulatory risk: Compliance with regional data protection laws is a significant concern following a breach.
• Operational disruption: The fallout from a breach can interfere with the normal business functions of a technology provider.