Dutch ??? Listed by Radiant Ransomware Group

On October 16, 2025, the ransomware group known as Radiant added a Dutch organization listed only as “Dutch ??” to its public leak site, giving the victim seven days to contact them or face the release of exfiltrated internal files.

What Public Reporting Shows

Public reporting indicates the listing appeared on the Radiant leak site hosted via ransomware.live. The entry contains minimal information: the victim’s nationality, the placeholder name “Dutch ??”, and a demand that the organization reach out within seven days. No specific victim count, exact company name, or detailed list of stolen data has been published on the leak page itself. Available reporting describes the incident as a ransomware attack in which internal files were allegedly exfiltrated before encryption or as part of the double-extortion tactic now standard in the ransomware ecosystem.

October 16, 2025 marks the public disclosure date on the leak site. The data types referenced are described only as “internal files,” leaving open the possibility that employee records, customer information, financial documents, or operational data could be included.

Why This Matters for You and Your Family

When any organization holding personal information suffers a breach, the people whose data sits in those “internal files” are placed at immediate risk. If you or your family members have done business with Dutch companies — whether as customers, patients, employees, or vendors — your details may now be in the hands of criminals. A single exposed email, phone number, or address can serve as the starting point for identity theft, phishing campaigns, or harassment that reaches your home.

Ordinary families rarely learn about these incidents until it is too late. By the time the files appear on a leak site, copies may already have been downloaded by multiple threat actors who trade or sell the information on underground forums.

The Doxxing and Identity-Chain Risk

Ransomware leaks rarely stop at one company. Stolen internal files often contain spreadsheets that link employee names to personal email accounts, phone numbers, addresses, and sometimes family member details. These fragments allow attackers to build an identity chain that follows you from work to home to your children’s online activities. A credential found in one breach can unlock a gaming account, which in turn reveals chat logs, linked phone numbers, and further personal data. The chain grows quickly and can lead to doxxing, swatting, or targeted extortion against you or your children.

Radiant’s Publicly Known Track Record

Public reporting attributes the group’s emergence to 2024. Radiant has targeted organizations across multiple countries using a double-extortion model: it encrypts victim systems and simultaneously exfiltrates data, then threatens to publish the files unless a ransom is paid. Notable prior victims include companies in Europe and North America, though exact names fluctuate as new incidents are confirmed. The group’s typical playbook begins with initial access through phishing or exploited remote desktop services, followed by lateral movement inside the network, data exfiltration, and finally the publication of samples on its leak site with a short negotiation window — usually seven days — before full release.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, usernames, and real-world identity so you can see exactly what this leak may have exposed.
• Rotate any password you used at the Dutch organization anywhere else it is reused, and switch on two-factor authentication through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information surfaces you learn within hours instead of months.
• Cover the household with DoxxScan family protection that extends to dependents and your children’s gaming accounts, which frequently become targets when credential leaks cascade into account takeovers and doxxing chains.
• Let remediation specialists handle the follow-up work, including sending takedown requests to data brokers and monitoring for reappearance of the stolen files.

The pace of ransomware leaks continues to accelerate, and waiting for news to reach mainstream outlets leaves your family exposed. Starting with a clear picture of your current exposure and maintaining ongoing vigilance is the most practical defense available to ordinary people today. DoxxScan by GalaxyWarden delivers that combination of continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage that includes children’s gaming accounts.