[DATACARRY] – Ransomware Victim: Balcia Insurance

image

Ransomware Group: DATACARRY

VICTIM NAME: Balcia Insurance

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the DATACARRY Onion Dark Web Tor Blog page.


AI Generated Summary of the Ransomware Leak Page

The ransomware leak page pertains to Balcia Insurance, a European insurer based in Latvia. The attack date is reported as May 26, 2025, indicating the date when the breach was likely discovered and the data compromised. The company specializes in non-life insurance products, including automobile, property, travel, accident, and liability coverage, and operates across nine European countries. The leak suggests that sensitive data from Balcia Insurance has been accessed by threat actors, with an ongoing effort to distribute or threaten disclosure of the stolen information. The page includes references to various infostealer tools, indicating the presence of malicious activities aimed at extracting corporate data.

The leak information reveals that multiple infostealer malware families, such as Azorult, Lumma, Raccoon, RedLine, StealC, and Taurus, have been used against the organization, with a total of 21 affected users. The page provides no screenshots or specific leaked files but notes modifications related to website updates. No explicit images, download links, or explicit sensitive content are displayed on the leak page. The details emphasize the cyberattack’s impact on a prominent insurer operating in the financial services industry within Latvia, highlighting the threat landscape faced by digital insurers today.


A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.

If you like the site, please support us on “Patreon” or “Buy Me A Coffee” using the buttons below

To keep up to date follow us on the below channels.