ransomware Credible Morocco (MA) logistics

La Voie Express listed by the Medusa ransomware group

La Voie Express

📅 12 October 2025
CompanyLa Voie Express
CountryMorocco (MA)
Sectorlogistics
Breach date2025-10-12
People affectedNot disclosed
Ransomware groupmedusa
Data typescorporate records, client data, financial documents

Overview

The Medusa ransomware group has listed La Voie Express, a Moroccan logistics company, on its leak site. The company offers messaging, transport, e-commerce and warehousing services. The listing appeared on 12 October 2025. At the time of analysis, the group's leak page was not reachable.

What was published

The group claims to have exfiltrated corporate data from the logistics company. The archive is expected to include client records, shipment documentation and financial documents.

Risks for affected individuals

  • Clients' data may be exposed.
  • Shipment records could be misused.
  • Employees' information may be included.

What remains unknown

  • The volume of data exfiltrated.
  • The exact contents of the leak.
  • Whether the data has been published elsewhere.

What affected people should do

Business partners should verify communications through official channels. La Voie Express should notify partners and staff, review its systems, and report the incident to Moroccan authorities.

Sources

  • http://xfv4jzckytb4g3ckwemcny3ihv4i5p4lqzdpi624cxisu35my5fwi5qd.onion/detail?id=d31f1afc1c34917fb1e0affbbe60b217