On August 05, 2026, the Everest Ransomware Group listed Al-Futtaim Group on its leak site, claiming the Dubai-based conglomerate as a victim. The organisation has not, as of this writing, issued any public confirmation or regulatory filing about the incident. According to the leak-site listing, the threat actors allege they obtained internal data from the diversified business that operates retail, automotive, real estate, and financial services across the Middle East, Africa, and Asia.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch Al-Futtaim Group
Get alerted the next time Al-Futtaim Group files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about Al-Futtaim Group’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Details from the Leak-Site Listing
The Everest leak site entry for Al-Futtaim does not specify the volume of records involved, the exact data types allegedly taken, or the systems accessed. It follows the group’s standard format of posting a victim name, a short proof package, and an extortion deadline. The listing states that sensitive corporate information has been exfiltrated and will be published if demands are not met. Because the only primary source is the attackers’ own leak page, this remains an unconfirmed claim. Al-Futtaim has made no official statement acknowledging a breach, data theft, or negotiations with Everest.
Why This Matters for You and Your Family
Even without confirmed numbers, any breach at a company the size of Al-Futtaim creates real risk for ordinary customers, employees, suppliers, and their families. The group’s operations touch millions of people through retail brands, car dealerships, property management, and financial products. A successful compromise could expose names, contact details, financial records, employment information, or transaction data. If your data is among what was taken, it can be sold on underground markets long after the initial extortion window closes. Leak-site listings like this one often signal that customer and staff records are now in play, increasing the chance of identity theft, phishing, and account takeover attempts aimed at you and your household.
Doxxing and Identity-Chain Risks
Ransomware groups rarely limit themselves to corporate files. When customer or employee data is taken, attackers and subsequent buyers frequently chain it with other leaks to build full identity profiles. A leaked email or phone number from an Al-Futtaim transaction can be linked to your social-media handles, children’s gaming accounts, or spouse’s loyalty-program records. These chains allow doxxing that reveals home addresses, family relationships, and daily routines. Gaming credentials exposed in the same ecosystem are especially dangerous because children’s accounts often reuse elements of parental information, creating a direct path from corporate breach to personal harassment or financial fraud. The longer the data circulates, the harder it becomes to contain.