DAL Group listed by the RansomHub ransomware group

Overview

The RansomHub ransomware group has listed DAL Group, a major Sudanese conglomerate active in agriculture, food production, automotive distribution and healthcare, on its leak site. The listing appeared on 20 November 2024. At the time of analysis, the group's leak page was not reachable.

What was published

The group claims to have exfiltrated corporate data from the conglomerate. The archive is expected to include business records, financial documents and employee files across the group's operations.

Risks for affected individuals

• Employees' personal records may be exposed.
• Commercial data could be of value to competitors.
• Financial information may enable fraud attempts.

What remains unknown

• The volume of data stolen.
• The exact contents of the leak.
• Whether the data has been published elsewhere.

What affected people should do

Employees should update credentials and watch for phishing referencing the group. DAL Group should notify staff and partners, engage cybersecurity experts, and coordinate with Sudanese authorities on the response.