yassir.com Listed by killsec Ransomware Group

Yassir.com appeared on the leak site of the ransomware group Killsec on October 7, 2024. The Algerian ride-hailing, food-delivery, and grocery super-app, used by millions of customers across North Africa and France, had internal files stolen during a ransomware attack. The listing does not specify how many customer records were affected or exactly which types of personal data were taken.

Details from the Leak-Site Listing

The primary disclosure comes directly from the Killsec ransomware leak site, mirrored on ransomware.live. It states that internal files were exfiltrated from Yassir during a ransomware operation. The notification does not quantify the number of affected records, nor does it list specific data fields such as names, phone numbers, payment details, or government identifiers. A sample of the stolen material is hosted on the onion site, but the full volume and precise contents remain undisclosed by the attackers. The listing follows the group’s standard format: victim name, date of publication, and a demand for payment to prevent further release.

Why This Matters for You and Your Family

If you have ever used Yassir to order food, book a ride, or buy groceries, your personal information may now sit in an attacker-controlled archive. Even when exact data types are unknown, ransomware incidents of this kind routinely expose names, email addresses, phone numbers, delivery addresses, and sometimes partial payment information. For families that share a single account or use the app for children’s errands, one breach can expose multiple household members at once. The absence of a confirmed record count does not reduce the risk; it simply means the full scope has not been made public.

Doxxing and Identity-Chain Risks

Stolen internal files often contain more than isolated records. They can include customer-support tickets, driver databases, geolocation logs, and linked account details that allow attackers to map one piece of information to another. A phone number tied to a delivery address can quickly lead to social-media profiles, family names, and children’s usernames. These chains accelerate doxxing campaigns, SIM-swapping attempts, and follow-on extortion. Credential leaks from such incidents also cascade into gaming accounts, where the same password or email re-use lets attackers seize children’s profiles and then demand payment to restore access.

Killsec’s Publicly Known Track Record

Public reporting attributes Killsec with emerging in early 2024 as a ransomware and extortion operation. The group typically gains initial access through phishing, compromised remote-desktop credentials, or unpatched web applications. Once inside, they exfiltrate data before deploying ransomware, then publish samples on their leak site when victims refuse to pay. Notable prior targets have included mid-sized companies in logistics, retail, and technology sectors. Their playbook relies on speed: short negotiation windows followed by incremental data dumps designed to pressure victims and embarrass them publicly. The exact success rate and total victims remain unclear, but the group’s consistent posting on dark-web leak sites shows they follow through on threats when ransoms are not paid.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, with cleanup handled by the service.
• Rotate any password you used on Yassir.com anywhere else it is reused and enable two-factor authentication through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your data is caught in hours, not months.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that often chain back to the same address or email.
• Let remediation specialists handle takedown requests for any exposed personal documents or photos that surface on data-broker or extortion sites.

The incident underscores that even popular consumer apps can become targets, and the data stolen today may fuel identity theft or harassment months from now. Start your DoxxScan trial to gain continuous monitoring, AI-powered identity-chain mapping, and hands-on remediation by specialists that protects both you and your family, including gaming accounts vulnerable to credential-stuffing attacks that follow breaches like this one.