yassir.com listed by the killsec ransomware group

Overview

On 7 October 2024, the KillSec ransomware group listed Yassir on its leak site. Yassir is an Algerian super app for ride-hailing, food delivery and grocery shopping, used by more than five million people. The listing placed the company among KillSec's victims of that period.

What was published

The KillSec listing for Yassir did not specify the volume of data exfiltrated or the categories involved. KillSec has published stolen data for other victims on its channels. No archive linked to Yassir was observed during the analysis window.

Risks for affected individuals

Yassir users could be exposed if account details, phone numbers, delivery addresses or payment information were among the stolen files. Such data enables phishing, account takeover and targeted fraud. Driver-partners could face exposure of identity and earnings records.

What remains unknown

The scope of the exfiltration, the records involved, and whether the group published files are not confirmed. No official statement from Yassir about the incident has been identified.

What affected people should do

Users should change passwords for the app, enable additional authentication where available, and monitor payment methods for unauthorised transactions. Driver-partners should verify communications through official channels and report suspicious messages.