Supreme Administrative Court of Bulgaria Listed by ransomhouse Ransomware Group

On January 27, 2025, the Supreme Administrative Court of Bulgaria appeared on the leak site of the ransomware group RansomHouse, with the attackers claiming to have exfiltrated internal files during a ransomware incident.

What's Publicly Reported from Reporting

Public reporting indicates the Supreme Administrative Court was listed on the RansomHouse leak portal that day. The court serves as Bulgaria’s highest judicial body for administrative law, overseeing complaints against government ministers, the Council of Ministers, the Supreme Judicial Council, and other public acts. Available reporting describes the exposed material as internal files, though the precise volume and specific data types have not been independently verified. No confirmed victim count for individuals whose information may have been inside those files has been released. The listing follows the group’s typical pattern of publishing samples after an initial extortion window.

Why This Matters for You and Your Family

When a national court’s internal systems are breached, the information inside can include names, addresses, identification numbers, court filings, and correspondence belonging to ordinary citizens. If your family has been involved in any administrative dispute — a tax appeal, a driving licence challenge, a planning permission case, or a complaint against a government agency — your details could be among the records now in criminal hands. Once leaked, that data does not expire. It can be sold, combined with other breaches, and used years later for identity theft, loan fraud, or targeted scams against you or your children.

The Doxxing and Identity-Chain Risks

Court records frequently link real names, home addresses, phone numbers, email accounts, and sometimes dates of birth. Attackers do not stop at one database. They cross-reference these details with credential leaks from earlier breaches, gaming platforms, social media, and data-broker sites. A single exposed email can unlock linked accounts; a home address can lead to physical intimidation or doxxing. Credential leaks like this one routinely cascade into account takeovers on gaming services, where children’s usernames and passwords are reused. The chain can expose an entire household before you realise anything is wrong.

RansomHouse Track Record

Public reporting attributes RansomHouse with emerging in 2021. The group has targeted hospitals, schools, local governments, and private companies across multiple countries. Its standard playbook involves gaining initial access, exfiltrating data before encryption, then demanding ransom. If payment is refused, the group publishes samples on its leak site and pressures victims with threats of further exposure or sales to other criminals. The Supreme Administrative Court of Bulgaria is the latest in a long list of organisations named on the same portal.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, usernames, and real-world identity so you can see exactly what chains exist right now.
• Rotate any password you used on Bulgarian government or court-related sites anywhere else it is reused, and switch on two-factor authentication through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1 billion+ breach records and more than 100 platforms so the next time your information appears it is caught within hours instead of months.
• Cover the household with DoxxScan family protection that extends to your children’s gaming accounts, which often become entry points when credential leaks cascade into takeovers and doxxing chains.
• Let remediation specialists handle takedown requests across data brokers and leak sites while you focus on securing your own accounts.

The incident shows how even institutions that hold sensitive public records remain targets, and the fallout can reach any family whose information passed through those systems. Starting with clear visibility into your personal exposure chain is the most practical step you can take today. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and full household coverage that includes children’s gaming accounts.