EyeGene Listed by raworld Ransomware Group

On April 28, 2023, biotech firm EyeGene appeared on the leak site operated by the raworld ransomware group. The listing states that the company suffered a ransomware attack in which internal files were exfiltrated. The group has not publicly disclosed the exact number of records involved or the specific types of documents taken, only that sensitive internal data was obtained.

Details from the Leak-Site Listing

The raworld leak site entry for EyeGene states the company was hit by a ransomware operation and that attackers successfully stole internal files before encryption or during the compromise. No sample data has been published at the time of the listing, and the disclosure does not quantify affected records or name the precise systems accessed. The posting follows the group’s standard format of naming the victim, stating that data was exfiltrated, and presumably pressuring the company to negotiate before any further publication occurs.

April 28, 2023 marks the first public confirmation of the incident through the ransomware leak site. The notification does not detail whether customer records, employee personal information, or research data were included in the stolen material.

Why This Matters for You and Your Family

When a healthcare-adjacent company like EyeGene loses control of internal files, the people whose information resides in those files face direct risk. Even if the listing does not specify what was taken, ransomware groups routinely access employee records, partner contracts, patient-related documents, and financial spreadsheets. If your name, address, date of birth, Social Security number, or medical details were ever shared with EyeGene or one of its business partners, those records may now sit on a criminal server.

Ordinary families are affected because biotech firms routinely handle genetic testing data, clinical trial enrollment forms, and insurance information. A single breach can expose multiple members of the same household if they participated in the same study or used the same insurance plan.

The Doxxing and Identity-Chain Risk

Stolen internal files rarely contain only one data point. They often include spreadsheets that link names to email addresses, phone numbers, employee IDs, and sometimes family member details. Attackers and subsequent data brokers can combine this information with other leaks to build a complete identity chain. Once criminals map your work email to personal accounts, the risk of account takeover, SIM swapping, and targeted phishing rises sharply.

Credential leaks like this one cascade into gaming account takeovers when the same password was reused for a child’s Roblox, Fortnite, or Steam account. A seemingly minor corporate breach can therefore expose an entire household’s digital life.

Raworld’s Known Track Record

Public reporting attributes raworld with emerging in late 2022 as a ransomware-as-a-service operator. The group has listed dozens of victims across manufacturing, healthcare, and professional services sectors. Its typical playbook involves initial access through phishing or exploited remote desktop protocols, followed by deployment of ransomware, exfiltration of sensitive files, and then dual extortion: demanding payment to prevent file encryption and a second payment to avoid data publication on the leak site.

The group maintains an active Tor leak site and follows a predictable timeline of posting victim names, adding pressure by releasing small proof files, and eventually dumping larger archives if demands are not met. Exact ransom figures demanded from EyeGene remain unknown.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup of Warden to remove what you can.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours rather than months.
• Rotate any password you ever used at EyeGene or its partner portals and switch to 2FA through an authenticator app everywhere that password was reused.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often chain back to the same address or parent email.
• Let remediation specialists handle ongoing takedown requests across data brokers and extortion sites on your behalf.

The EyeGene listing is a reminder that corporate ransomware incidents now routinely place ordinary families in the crosshairs of identity thieves and extortionists. Acting quickly on the credentials and personal details already exposed can limit further damage. Start your DoxxScan trial for continuous monitoring, AI-powered identity-chain mapping, and hands-on remediation by specialists that covers both you and your children’s online accounts.