qed.co.ug Listed by funksec Ransomware Group

On January 27, 2025, the ransomware group Funksec added qed.co.ug to its leak site, claiming that it had exfiltrated internal files from QED Solutions Ltd, a Ugandan recruitment platform that handles job-seeker and employer data across finance, IT, sales, and oil and gas sectors.

What's Publicly Reported from Reporting

Public reporting indicates the company operates a recruitment and HR consultancy service connecting employers with candidates for roles of varying scale. The incident involved a ransomware attack in which attackers gained access, exfiltrated internal documents, and later listed the victim on their dark-web leak portal. No exact victim count has been disclosed, and the precise volume or types of records exposed remain unclear from available screenshots and listings. The primary source is the Funksec leak site itself, indexed by ransomware tracking platforms such as ransomware.live.

Why This Matters for You and Your Family

When recruitment platforms are breached, the personal information you provided while job hunting — full names, addresses, phone numbers, email accounts, employment history, and sometimes national ID or passport copies — can end up in criminal hands. Internal files often contain spreadsheets or databases that link multiple family members if you used shared contact details or applied for relatives. Once that data circulates, it can fuel spam, identity theft, or targeted scams against you or your children for years. Even if you are not currently job seeking, older records from previous applications may still sit in the compromised systems.

The Doxxing and Identity-Chain Implications

A single recruitment-site breach rarely stops at one database. Attackers routinely cross-reference the exposed emails, phone numbers, and names against other leaks to build detailed profiles. Public reporting describes how these chains quickly surface social-media handles, family relationships, children’s names, and even gaming usernames. Credential leaks like this one frequently cascade into account takeovers on email, banking, or gaming platforms. For families, a teenager’s gaming account tied to the same email can become an entry point for harassment or further data theft. Identity-chain mapping turns one breach into a map of your entire digital life.

Funksec’s Publicly Known Track Record

Public reporting attributes the group’s emergence to mid-2024. Funksec has listed dozens of organizations, focusing on smaller businesses and regional service providers rather than exclusively large corporations. Notable prior victims include various companies in healthcare, education, and logistics sectors according to ransomware trackers. Their typical playbook begins with initial access through phishing or exploited remote-desktop services, followed by exfiltration of internal files, deployment of ransomware, and — when payment is refused — publication of stolen data on their leak site to pressure victims. The group’s extortion style combines data leaks with public shaming on their onion site and affiliated channels.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by the service.
• Rotate any password you used on qed.co.ug or similar recruitment sites anywhere it is reused, and switch on 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak exposing you or your family is caught in hours, not months.
• Cover the household with DoxxScan family coverage that extends to dependents and children’s gaming accounts that often chain back to the same contact details.
• Let the remediation specialists perform hands-on takedown requests across data brokers and leak sites on your behalf.

The incident is a reminder that recruitment and HR platforms are high-value targets because the data they hold creates long-term identity chains. Starting with a clear picture of where your information already appears online remains the most practical defense. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1 billion+ breach records and more than 100 platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts. Source: funksec leak site via ransomware.live