Ransomware Group: TRINITY

VICTIM NAME: Agencia Tributaria AEAT

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the TRINITY Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page concerning the Agencia Tributaria AEAT, which is part of the public sector in Spain, reveals significant breach information. The leaked data amounts to approximately 560 gigabytes, which is indicative of the extensive scale of the incident. This organization generates annual revenue of around $38 million, suggesting a substantial impact from this leak. The publication date of the leak is recorded as December 31, 2024, while it was discovered almost a month prior, at the end of November 2024. The leak page is associated with the notorious Trinity ransomware group, known for targeting public institutions and extracting sensitive data for extortion purposes.

The page features a screenshot showcasing various elements related to the breach but does not disclose specific details about any individuals or sensitive data contained within the leak. It appears that download links for the leaked data may be available, although these specifics are not provided here. The presence of this information raises concerns regarding the cybersecurity posture of the public sector in Spain, particularly given the financial implications and potential impact on public services. The Agencia Tributaria AEAT operates under significant scrutiny, making the repercussions of such data breaches particularly dire for its operations and the trust placed in it by the public.