SA2000.COM in Saudi Arabia (SA) reported a ransomware incident in which the threat actor stormous allegedly extracted 150 GB of data, including COMPTABILITÉ, FACTURES ACHAT/À PAYER, Banking Informations, PAIEMENTS CLIENTS, CLIENTS/PO CLIENTS, FOURNISSEUR/TRANSPORTEURS, EMPLOYÉS/EMBAUCHE, ACTIONNAIRES, and COURRIEL/DOCUMENTS. There is still an opportunity to communicate and resolve the situation, and the organization is currently awaiting the company’s response. #SaudiArabia
Incident Details
- Victim: SA2000.COM
- Sector: Not Found
- Country: SA
- Actor: stormous
- Source:
- Discovered: 2026-06-04T01:52:43.489610+00:00
- Published: 2026-06-04T00:00:00+00:00
Information
- 150 GB of data has been extracted
- Included accounting records, purchase invoices, payable and modified invoices
- Included banking information, client payments, clients, and client purchase orders
- Included suppliers, transporters, employees, hiring records, shareholders, emails, and documents
- There is still an opportunity to communicate and resolve this situation
- The company’s response is still pending
Disclaimer: This post is based on public claims made by the ransomware group "stormous". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.