The Arcus ransomware group has added a French school and a Spanish IT services company to its dark web leak site, threatening data release if their ransom demands are not met. This incident highlights the group’s broad targeting across sectors like education and technology services. #ArcusRansomware #DarkWebLeaks
Keypoints
- The Arcus ransomware group included a French school and Spanish IT company on its leak site in July 2025.
- The targeted organizations face a countdown threat to release exfiltrated data if ransom is not paid.
- The French institution is a Catholic school with over 700 students, highlighting the impact on education.
- The Spanish target is an IT solutions provider specializing in computer maintenance and sales.
- The campaign demonstrates the group’s tactic of double extortion by publicly threatening data release.