Ransomware Group: EVEREST

VICTIM NAME: Jordan Kuwait Bank – Full leak published

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the EVEREST Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The leak pertains to Jordan Kuwait Bank, a prominent financial institution in Jordan, which specializes in banking and financial services. The incident was discovered on June 4, 2025, and involves a significant data breach potentially exposing sensitive client information. The leak was publicly announced by the threat group Everest, indicating a full data leak that could include confidential banking details, internal documents, or other secured data. The incident poses a serious security concern, potentially impacting customer trust and regulatory compliance. The leak was accompanied by a screenshot showing internal data or documents, emphasizing the severity of the breach. Instructions or links to access the leaked data have been shared through the dark web, highlighting the breach’s public nature. Further verification is necessary to establish the scope and impact of the compromised information. Governments and security teams are advised to scrutinize the incident carefully and implement necessary containment measures.

The breach appears to be part of an ongoing campaign by the hacker group Everest, known for targeting financial institutions. The incident’s timing indicates it may correlate with a broader cyber attack wave aimed at regional banks. The leak’s publication could lead to a range of malicious activities, including identity theft, financial fraud, or further attacks against the bank’s clients. The visual evidence provided via a screenshot suggests that internal documents, possibly including non-public data, were leaked, underscoring the attack’s potential severity. No personally identifiable information, such as names or contact details, has been disclosed publicly at this stage. Organizations are urged to review their cybersecurity measures and monitor for any signs of related activity. Protecting customer data remains a priority in response to this breach.