Matouk Bassiouny Listed by RA World Ransomware Group

On October 25, 2024, Egyptian law firm Matouk Bassiouny appeared on the leak site operated by the ransomware group known as raworld. The listing states that internal files were exfiltrated during a ransomware attack on the firm’s systems. The disclosure does not specify the number of records affected, the exact data types beyond “internal files,” or any ransom demand.

Reported Details from the Listing

The raworld leak site entry, accessible via the .onion link indexed by ransomware.live, states that Matouk Bassiouny suffered a ransomware incident resulting in data exfiltration. It lists the Cairo-based firm as a victim and indicates that samples or proof of the stolen material have been uploaded. No client list, financial records, or specific document categories are detailed in the public portion of the posting. The notification does not provide a deadline for payment or further information about the initial access vector used by the attackers.

Why This Matters for You and Your Family

When a law firm’s internal files are stolen, the exposure often reaches far beyond the business itself. Clients entrust these firms with names, addresses, identification numbers, financial details, court filings, and sensitive correspondence. If any of that material belongs to you or someone in your household, the breach puts your personal information directly in the hands of criminals. Even if you are not a current client, shared vendors, opposing parties in litigation, or employees of corporate clients can create unexpected overlap. The result is heightened risk of identity theft, targeted phishing, and fraudulent loan applications using data that was supposed to remain protected under attorney-client privilege.

Doxxing and Identity-Chain Risks

Ransomware operators rarely stop at one dataset. A single leaked email address or phone number from the firm’s files can be combined with information from previous breaches to build a complete profile. Attackers chain these fragments together: an old password from one site, a home address from another, and now privileged legal documents that reveal family structures, assets, or ongoing disputes. This creates persistent doxxing chains that can surface on dark-web forums or extortion marketplaces months or years later. Gaming accounts belonging to children are particularly vulnerable because the same email or password reused for a parent’s legal correspondence often protects those accounts, turning one professional breach into a household compromise.

raworld’s Known Track Record

Public reporting attributes raworld with emerging in early 2024 as a ransomware-as-a-service operator. The group has claimed responsibility for attacks on organizations across multiple continents, typically listing law firms, manufacturers, and healthcare providers. Their standard playbook involves gaining initial access through phishing or exploited remote desktop services, deploying ransomware to encrypt systems, and then exfiltrating data before triggering the encryption. Extortion follows a double-pressure model: demands for ransom to prevent publication of the stolen files, coupled with threats to contact the victim’s clients directly. The raworld leak site is used to publish proof files and pressure non-paying victims, a pattern consistent with other mid-tier ransomware operations observed throughout 2024.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, including any connections that may have surfaced from the Matouk Bassiouny files.
• Rotate passwords used with the law firm or any related vendor accounts and enable 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure is caught in hours, not months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts vulnerable to credential chaining from this claimed breach.
• Let remediation specialists handle data-broker takedown requests and removal of any exposed personal documents that appear for sale.

The Matouk Bassiouny breach is a reminder that professional services entrusted with your most private information remain high-value targets. Staying ahead requires more than reactive checks; it demands ongoing visibility into how your identity fragments travel across the internet. DoxxScan by GalaxyWarden delivers that visibility through continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Start your DoxxScan trial today and close the gaps before the next leak appears.