Squeezer Software listed by the Fog ransomware group

Overview

Squeezer Software, a Tunisian software company, was listed by the Fog ransomware group on 12 February 2025. The group published extracts from the company's GitLab instance as evidence of the intrusion. Fog named Squeezer alongside other targets in a shared disclosure.

What was published

The Fog listing includes an extract from GitLab repositories, which indicates that source code and internal development data were accessed. The extract names Squeezer-software along with unrelated projects, suggesting the group exfiltrated data from a shared or hosted environment. The full archive was offered on the group's leak site.

Risks for affected individuals

Source code exposure can reveal hardcoded credentials, internal architecture, and customer integration details. If the repositories contain client data or employee information, affected individuals could face phishing and credential abuse.

What remains unknown

The total volume of exfiltrated data is not disclosed. Whether customer records were stored alongside source code is unclear, and the company has not publicly confirmed the incident.

What affected people should do

Customers and partners should rotate credentials used with Squeezer services and watch for suspicious messages. The company should audit its GitLab access logs, rotate secrets found in repositories, and disclose the scope of the exposure.