Inter-American Tropical Tuna Commission (IATTC) Listed by minteye Ransomware Group

On December 12, 2025, the Inter-American Tropical Tuna Commission appeared on the leak site of the minteye ransomware group after attackers exfiltrated 2.3 TB of internal files. Anyone whose personal information, employment records, or contact details were stored in those systems may now be exposed, including staff, contractors, research partners, and individuals whose data the organization routinely handles.

What's Publicly Reported from Reporting

Public reporting indicates the IATTC, an intergovernmental body that coordinates tuna fisheries research and management across the eastern Pacific, was hit by a ransomware incident. The attackers claim to have taken 2.3 TB of internal documents. No confirmed list of exact victim counts or specific data fields has been released, but the volume suggests a wide range of administrative, financial, and operational records were taken. The minteye group posted the organization to its leak site on December 12, 2025, and set an implicit deadline for any potential negotiations.

Available reporting describes the data as “internal files” without further technical detail on whether email databases, spreadsheets containing personal identifiers, or research participant information were included. Industry research from sources such as DoxxScan™ continuous monitoring indicates that government-adjacent and nonprofit organizations frequently store names, addresses, dates of birth, and contact information that later surface in downstream leaks.

Why This Matters for You and Your Family

When an organization like the IATTC loses control of 2.3 TB of internal files, the ripple effects reach everyday people. If you or a family member ever worked with the commission, applied for a permit, participated in a study, or had your contact details shared through its networks, that information may now be in the hands of criminals. Names, addresses, emails, and phone numbers are the building blocks attackers need to launch identity theft, phishing campaigns, or harassment.

Your family’s exposure does not end with the initial breach. Once data leaves the organization it can be sold, reposted, or combined with other leaks. A single record that links your work email to a home address can give criminals the starting point for deeper targeting.

The Doxxing and Identity-Chain Implications

Ransomware leaks rarely stay contained. Attackers and subsequent buyers often chain exposed credentials to gaming accounts, social-media handles, and family-member profiles. A work email from the IATTC files that matches a reused password can lead to takeover of your child’s Roblox or Fortnite account, revealing real names, voice-chat logs, and linked phone numbers. These connections create an identity chain that turns one breach into repeated harassment or doxxing attempts.

Credential leaks like this one cascade into account takeovers when the same password appears across personal services. Children’s gaming accounts are especially vulnerable because parents often reuse credentials and because younger users rarely enable strong protections.

What to Do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real identity so you can see exactly what the minteye leak may have exposed.
• Rotate the password you used for any IATTC-related account anywhere it is reused, then enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak that touches your family is caught in hours, not months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that chain back to the same address or credentials.
• Let remediation specialists handle takedown requests across data brokers and exposed profiles while you focus on securing day-to-day accounts.

The minteye group’s public track record shows it emerged in 2024 and has targeted mid-sized government agencies, research bodies, and nonprofits with a playbook of initial access through phishing or unpatched remote services, followed by exfiltration of large document repositories and public shaming on its leak site when payments are refused. Public reporting attributes similar tactics to the group in prior incidents, though exact attribution can shift as operators rebrand.

Incidents like the IATTC breach remind us that government-adjacent data losses quickly become personal. Starting with a clear map of your exposure and putting continuous protection in place gives you and your family the best chance of staying ahead of the next wave. DoxxScan by GalaxyWarden delivers that protection through continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts.