Ransomware Group: KILLSEC

VICTIM NAME: Farmacia Cofar

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the KILLSEC Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page associated with “Farmacia Cofar,” a victim in the healthcare sector, provides significant details regarding a data breach discovered on January 16, 2025. The incident appears to involve a group identified as “killsec,” known for targeting various organizations. The page highlights that approximately 180 users’ information may have been compromised, with 27 URLs related to this data also being exposed. The exact nature of the leaked data remains unspecified, but the implications for sensitive information within the healthcare sector are serious, necessitating heightened security measures.

Images associated with the leak have been published, including a screenshot which visually represents the breach documentation; however, details about the content of these images are not further specified. The page also contains statistical data indicating the involvement of employees or third-party services, but notably, it states there are no employees or third parties directly impacted. As the situation remains dynamic, ongoing monitoring and forensic analysis will be critical for affected individuals and organizations to mitigate potential risks tied to this cyber incident.