Egyptian Sudanese listed by the arcusmedia ransomware group

Overview

On 16 May 2024, the Arcus Media ransomware group listed the Egyptian Sudanese Company on its leak site. The company, which operates from Sudan and uses the domain egyptiansudanese.com, was presented as a new victim following the group's standard disclosure process. Arcus Media has operated as a ransomware operation since 2023.

What was published

The Arcus Media listing did not specify the number of records exfiltrated. The group's pattern is to publish a teaser with the company name and later release a compressed archive of stolen files. The exact contents of any archive associated with this victim have not been observed.

Risks for affected individuals

Depending on the files taken, employees and business partners of the Egyptian Sudanese Company could be exposed to phishing and impersonation. Corporate documents, contracts and personnel records are common targets in Arcus Media incidents, which increases the risk of fraud for the people named in them.

What remains unknown

Whether the group released the full archive, the size of the data set, and the categories of information involved remain unverified. No official statement from the company has been published, and the incident has not been independently confirmed beyond the leak site listing.

What affected people should do

Employees should change passwords for business and personal accounts, enable multi-factor authentication, and report any suspicious email that references company information. Business partners should confirm the status of shared data with the company through official channels.