International Busines Service Listed by Crypto24 Ransomware Group

On April 8, 2025, the ransomware group known as crypto24 added International Business Service to its leak site and began publishing internal files stolen from the company, including scanned identity cards (front and back) belonging to approximately 3,000 people.

Reported Details of the Breach

Public reporting indicates the attackers exfiltrated a range of sensitive documents during a ransomware incident. The exposed materials include images and PDFs of national identity cards for roughly 3,000 individuals, along with HR reports and payroll documents. The data appeared on the crypto24 leak site hosted via ransomware.live, where the group lists victims who have not met their demands.

At the time of publication, the exact number of affected employees, contractors, or clients remains unclear beyond the 3,000 identity documents. No evidence has surfaced that customer databases or financial account numbers were included in the initial dump, but the presence of identity cards and payroll files creates immediate risks for everyone whose personal information was stored by the company.

Why This Matters for You and Your Family

When a company that handles employment records suffers a breach, the people whose identity cards, addresses, and salary details are exposed are ordinary workers and their families. Identity cards contain your photograph, full name, date of birth, national ID number, and address — exactly the information needed to open accounts, apply for credit, or impersonate you. Payroll files often list spouses, dependents, and banking details that can be combined with the identity documents to build a complete profile.