[DATACARRY] – Ransomware Victim: Balcia Insurance
![[DATACARRY] - Ransomware Victim: Balcia Insurance 1 image](https://www.redpacketsecurity.com/wp-content/uploads/2024/09/image.png)
Ransomware Group: DATACARRY
VICTIM NAME: Balcia Insurance
NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the DATACARRY Onion Dark Web Tor Blog page.
AI Generated Summary of the Ransomware Leak Page
The ransomware leak page pertains to Balcia Insurance, a European insurer based in Latvia. The attack date is reported as May 26, 2025, indicating the date when the breach was likely discovered and the data compromised. The company specializes in non-life insurance products, including automobile, property, travel, accident, and liability coverage, and operates across nine European countries. The leak suggests that sensitive data from Balcia Insurance has been accessed by threat actors, with an ongoing effort to distribute or threaten disclosure of the stolen information. The page includes references to various infostealer tools, indicating the presence of malicious activities aimed at extracting corporate data.
The leak information reveals that multiple infostealer malware families, such as Azorult, Lumma, Raccoon, RedLine, StealC, and Taurus, have been used against the organization, with a total of 21 affected users. The page provides no screenshots or specific leaked files but notes modifications related to website updates. No explicit images, download links, or explicit sensitive content are displayed on the leak page. The details emphasize the cyberattack’s impact on a prominent insurer operating in the financial services industry within Latvia, highlighting the threat landscape faced by digital insurers today.
A considerable amount of time and effort goes into maintaining this website, creating backend automation and creating new features and content for you to make actionable intelligence decisions. Everyone that supports the site helps enable new functionality.
If you like the site, please support us on “Patreon” or “Buy Me A Coffee” using the buttons below
To keep up to date follow us on the below channels.