RANSOMWARE VICTIM

Yateem Group www.yateemgroup.com

blacknevas📅 October 29, 2025
8
same group

Attack Intelligence

Yateem Group www.yateemgroup.com was compromised in a ransomware attack attributed to blacknevas in October 2025. The organization, operating in an undisclosed sector in Unknown, was added to the group's data leak site as part of an extortion campaign.

blacknevas operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.

<p><strong><em>500+ gigabytes and over 100,000+ files available</em></strong></p><p></p><p>The Yateem Group owns nearly 100 optical outlets in addition to many other brands and facilities. At its heart, the group retains the original family values set forth by the founders.</p><p>A complete customer database with all contacts has been downloaded, including phones and emails of more than 9000000+ records, as well as all internal information on YateemGroup employees, passports, rights, work contracts and insurance.</p><p>The IT department is aware of the leak, but has broken off negotiations, and customer and employee data is being prepared for publication.</p><p>(ready to sell all databases without publishing)</p><p></p><p><strong>access was obtained thanks to the IT departments of these companies:</strong></p><p><strong>Trojan Construction &amp; Holding Group www.trojan.ae</strong></p><p><strong>T. Choithram And Sons, LLC www.choithrams.com</strong></p>

Other Victims — blacknevas (8)

Quick Facts

Attack DateOct 29, 2025
Intel Sourceransomlook

Threat Group

blacknevas
Motivation: financial
View group profile →

External Links

Data sourced from Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Victim listing does not imply confirmed breach — intelligence based on group claims.