Ransomware Group: FRAG

VICTIM NAME: Evasa

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the FRAG Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page concerns Evasa, an environmental engineering company based in Spain. The attack was discovered on June 11, 2025, and involved unauthorized access to sensitive company data. The compromised data includes financial statements, employee passports, personal documents, and scans of identification documents such as DNI cards. The leak indicates a serious breach of confidential information, potentially affecting both the company’s operations and its employees’ privacy. The page suggests that attackers successfully extracted this information and made it publicly accessible. No information about the attack methods or the perpetrators is provided. The leak emphasizes the importance of cybersecurity for organizations handling sensitive data.

The page includes no specific images or screenshots but references the existence of leaked documents. It highlights that the incident was identified and posted publicly, but no additional malicious activities or ransom demands are detailed. The leaked information exposes personal and financial data, underscoring significant risks related to data privacy and operational security. The victim’s activity is listed as unknown, but the nature of the leaked documents emphasizes the threat to corporate and personal confidentiality. Organizations should review their security measures to prevent similar breaches and protect sensitive information from unauthorized access.