Olivera Canarias Listed by blacklock Ransomware Group

On June 24, 2025, the ransomware group BlackLock added Olivera Canarias to its public leak site, exposing internal files stolen from the small Spanish architecture, engineering and design company.

What's Publicly Reported from Reporting

Public reporting indicates the company, which employs fewer than 25 people and generates under $5 million in annual revenue, was hit by a ransomware attack. The attackers exfiltrated internal files before encrypting systems or demanding payment. The data now sits on a Tor-based leak page hosted at an onion address linked through ransomware.live. No exact victim count has been published, and the precise volume or sensitivity of the stolen documents remains unclear from available reporting. The breach appears to follow BlackLock’s standard pattern of stealing data then threatening public release if ransom is not paid.

Why This Matters for You and Your Family

Even when the direct target is a small business, the information inside those files can easily include names, addresses, phone numbers, email accounts, or supplier contacts that belong to ordinary people like you. Once posted on a ransomware leak site, the data becomes freely available to identity thieves, stalkers, and scammers. Internal files from an architecture and engineering firm often contain contracts, invoices, employee records, or client correspondence that can be pieced together to build a detailed picture of your daily life, finances, or family routines. If your name appears in any of those documents, the breach now puts you and your family at higher risk of fraud, phishing, or physical exposure.

The Doxxing and Identity-Chain Implications

Ransomware leaks rarely stop at one company. Criminals use stolen emails, phone numbers, and personal details to chase credential leaks on other services. A password reused from an Olivera Canarias-related account can unlock your email, banking, or social media. These connections form what security analysts call an identity chain: one exposed handle leads to another, rapidly escalating from data theft to full doxxing. Gaming accounts are especially vulnerable in these chains because children and teens often reuse the same email addresses or passwords that appear in family business records. Available reporting describes how such cascades frequently end in account takeovers, harassment, or extortion aimed at the household.

BlackLock’s Publicly Known Track Record

Public reporting