ATG Listed by Coinbase Cartel Ransomware Group

On December 12, 2025, Swedish gaming company ATG appeared on the leak site of the coinbasecartel ransomware group in a listing claiming internal files were exfiltrated during a ransomware attack. The breach affects anyone whose personal data was stored in ATG’s systems, including customers who have placed bets, registered accounts, or shared contact details with the company that has operated in Sweden since 1974.

What Public Reporting Shows

Public reporting indicates that attackers gained access to ATG’s network, encrypted systems, and then exfiltrated internal documents before publishing a sample on their dark-web leak page. The exact number of people impacted remains unknown, as neither ATG nor the ransomware group has released a full data inventory. Available reporting describes the exposed material as internal files rather than a simple database dump, suggesting the breach could contain customer records, employee information, or operational data accumulated over decades of gaming and betting services.

December 12, 2025 marks the date the group listed ATG on its leak site hosted at an onion address. No public timeline has been confirmed for when initial access was obtained or how long the attackers remained inside the network prior to encryption and data theft.

Why This Matters for You and Your Family

When a gaming and betting company like ATG suffers a breach, the information exposed often includes names, addresses, email accounts, phone numbers, and payment details tied to real people and households. Criminals can use these records to attempt account takeovers on other services where you reuse the same credentials. For families this risk extends beyond the primary account holder: children’s gaming accounts, shared family emails, or linked payment methods can become entry points for further harassment or financial fraud.