Yource Bulgaria & Greece Listed by crypto24 Ransomware Group

On December 30, 2025, the ransomware group known as crypto24 publicly listed Yource Bulgaria & Greece on its leak site, claiming to have exfiltrated internal files from the customer experience and contact center services provider.

What's Publicly Reported from Reporting

Public reporting indicates that Yource operates contact centers and customer support services in Bulgaria and Greece. The company handles sensitive personal and business data for major international clients. The attackers claim access to HR records, customer datasets, financial documents, and project files, including information tied to clients such as Eneco Belgium, bofrost, essent.be, Media Competence, Sodexo, and Spotzer. No exact number of affected individuals has been confirmed, and the precise volume of data remains undisclosed. The listing appeared on the crypto24 leak site, which is tracked by ransomware monitoring platforms such as ransomware.live.

Why This Matters for You and Your Family

When a company that manages customer service and support operations suffers a breach, the information it holds often includes names, addresses, phone numbers, email accounts, dates of birth, and sometimes financial details or government identifiers. If you or any member of your family has interacted with services provided on behalf of Eneco, bofrost, Sodexo or similar organizations, your personal data may now sit in an attacker-controlled archive. Once exfiltrated, this data does not disappear; it circulates among criminal networks and can surface months or years later in identity theft attempts, phishing campaigns, or doxxing efforts. Ordinary families rarely learn about these incidents until fraudulent charges appear or unexpected accounts are opened in their name.

The Doxxing and Identity-Chain Risks

Credential leaks and internal documents from contact-center providers frequently contain employee usernames, customer reference numbers, and email addresses that link directly to personal identities. Attackers use these fragments to build larger profiles, connecting your work email to personal accounts, phone numbers to family members, and online handles to real-world addresses. The result is an identity chain that can lead to account takeovers across banking, shopping, and social platforms. Credential leaks like this one cascade into gaming account takeovers when children use the same email address or password patterns for Roblox, Fortnite, or other services. A single exposed customer record can therefore place both adult and children’s digital lives at risk.

What to Do

• Run a DoxxScan to map every link between your emails, phone numbers, online handles, and real identity, then complete the cleanup of exposed records.
• Rotate any password you have used with Yource, Eneco, Sodexo or the listed client organizations, and enable two-factor authentication through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1 billion+ breach records and more than 100 platforms so the next leak exposing you is flagged within hours instead of months.
• Cover the entire household with DoxxScan family protection, which extends to dependents and children’s gaming accounts that often chain back to the same addresses and emails.
• Let remediation specialists handle takedown requests for any personal data already appearing on broker sites or forums.

The incident underscores a simple reality: data once taken cannot be retrieved, but its downstream impact on your family can still be limited through prompt action and ongoing vigilance. DoxxScan by GalaxyWarden delivers continuous monitoring across 13.1B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage that includes children’s gaming accounts. Families who treat credential leaks as ongoing threats rather than one-time events are far better positioned to protect their financial accounts, credit profiles, and personal safety.