Ransomware Group: BERT

VICTIM NAME: S5 Agency World

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the BERT Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page pertains to S5 Agency World, a global port agency operating in over 360 ports with expertise in vessel and cargo services. The attack was carried out on June 10, 2025, and the incident was publicly disclosed shortly after the compromise. The page includes a screenshot of internal documents, indicating that sensitive operational information may have been accessed or leaked. The attack highlights vulnerabilities in the logistics and transportation sector, which are critical to global supply chains. The incident underscores the importance of cybersecurity measures in logistics firms, especially those operating internationally in multiple ports. No specific details about the nature of the data breach, sensitive information, or data exfiltration have been publicly disclosed beyond the mention of the attack.

Additional information on the leak page suggests the presence of downloadable data or leak indicators, but specific files or content are not described. The incident’s timing and the attack group’s activities imply potential disruptions to maritime operations, although no explicit operational impacts are detailed. The webpage features a visual screenshot that may depict internal documents or operational interfaces. The attack is attributed to a group identified as ‘bert.’ The country affected is the United Kingdom. This case serves as a reminder to organizations within the transportation and logistics industry to reinforce cybersecurity defenses to prevent similar future incidents.