International Business Service (IBS) listed by the Crypto24 ransomware group

Overview

The Crypto24 ransomware group has listed International Business Service (IBS), an Egyptian company operating ibsns.com, on its leak site. The listing appeared on 8 April 2025.

What was published

The group's post describes the exposed material as including:

• Identity cards, front and back, of about 3,000 people (images and PDFs)
• HR reports
• Payroll documents

Risks for affected individuals

• Identity documents create a risk of identity theft.
• Payroll data contains sensitive personal information.
• HR records may be misused.

What remains unknown

• The total volume of data involved.
• Whether the data has been published.
• The response status of the company.

What affected people should do

Individuals whose identity documents may be affected should monitor for misuse and consider credit monitoring. IBS should notify affected employees and customers, secure its systems, and coordinate with Egyptian authorities.