itc.gov.ae with 1K ! Listed by FunkSec Ransomware Group

On December 24, 2024, the Integrated Transport Centre (ITC) in Abu Dhabi had internal files listed for sale on a ransomware leak site after attackers from the funksec group exfiltrated data from itc.gov.ae. The breach affects anyone whose personal or vehicle records passed through the emirate’s main transport regulator, which oversees licensing, traffic management, public buses, taxis, and related services used daily by residents and visitors.

What Public Reporting Shows

Public reporting indicates that funksec posted a listing titled “itc.gov.ae with 1K” on its dark-web leak page. The data consists of internal files exfiltrated during a ransomware incident. No exact victim count inside the files has been independently verified, and the precise volume or sensitivity of the documents remains unclear from the initial listing. The ITC is the Abu Dhabi government body responsible for land transport regulation, traffic safety, and public mobility services across the emirate.

Why This Matters for You and Your Family

When a government transport agency loses control of internal files, the information often includes names, addresses, phone numbers, driver’s license details, vehicle registration records, and correspondence tied to licensing or fines. If your family has lived in or visited Abu Dhabi, any of those records could now sit in an attacker’s archive. Once leaked, this data does not expire; it can be combined with other breaches to build a complete profile that criminals use for identity theft, targeted scams, or physical threats. Ordinary families who renewed a license, registered a car, or paid a traffic fine through ITC systems now face the same exposure as high-profile targets.

The Doxxing and Identity-Chain Risks

Transport records frequently link an individual’s real identity to email addresses, phone numbers, vehicle plates, and sometimes family-member details. Attackers follow these chains: a leaked phone number leads to a gaming account, a shared family address connects children’s profiles, and one compromised credential opens multiple doors. Credential leaks like this one regularly cascade into account takeovers on social media, email, and gaming platforms. Children’s gaming accounts are especially vulnerable because parents often reuse passwords or security questions derived from official records. The result is not a single breach but an expanding map that can lead to doxxing, harassment, or financial fraud months or years later.

Funksec Group’s Known Track Record

Public reporting attributes the attack to the funksec ransomware group. The group emerged in 2024 and has focused primarily on smaller government and municipal targets. Its typical playbook involves gaining initial access, exfiltrating sensitive files, encrypting systems where possible, then publishing samples on a leak site to pressure victims into payment. Notable prior victims have included regional agencies and private companies handling public records. The group’s listings usually appear with short deadlines and threats to sell or publicly release the remaining data if ransom demands are unmet.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity drawn from records like those held by transport authorities.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your information is caught in hours rather than months.
• Rotate any password you have ever used on itc.gov.ae or related government portals anywhere it is reused, and switch to 2FA through an authenticator app instead of SMS.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts, which often chain back to the same address or parent credentials.
• Let remediation specialists handle takedown requests for any exposed personal documents or broker listings that surface from this incident.

The incident shows that even routine government interactions can place your family on leak-site menus. Acting quickly on the exposed data chain gives you the best chance of limiting damage before criminals combine it with future breaches. Start your DoxxScan trial today for continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage including children’s gaming accounts.