Luna Group listed by the Lamashtu ransomware group

Overview

The Lamashtu ransomware group has listed Luna Group, a major Egyptian conglomerate established in 1966, on its leak site. The group operates across the Middle East and North Africa with a focus on pharmaceuticals, cosmetics, perfumes and industrial raw materials. The listing appeared on 4 May 2026.

What was published

The group claims to have exfiltrated corporate data from the conglomerate. The archive is expected to include business records, financial documents and employee files across the group's divisions.

Risks for affected individuals

• Employees' personal records may be exposed.
• Commercial data could be of value to competitors.
• Financial information may enable fraud attempts.

What remains unknown

• The volume of data stolen.
• Whether product or client data is included.
• The timeline of any public release.

What affected people should do

Employees should update credentials and watch for phishing referencing the company. Luna Group should notify staff and partners, engage cybersecurity experts, and coordinate with Egyptian authorities on the response.