LogicVein: a ransomware attack may have leaked data of about 97,338 people, and data of 17,559 of them was posted on a dark-web leak site

1. 2025-12-08

   It found unauthorized access to its internal network and file encryption, and announced it the same day. [1] [3]

2. 2026-01-30

   It published the second report. [2]

3. 2026-02-27

   It published the third report as its final report, including more staff for security work as a prevention measure. [2] [4]

4. 2026-08-17

   In the fourth report it announced that further investigation had found that part of the data it held was posted on a dark-web leak site. [2] [5]

About 97,338 people may have had data leaked, and data of 17,559 of them was confirmed to be posted. The posted data includes names, company and department names and contact details (email addresses, addresses, phone numbers) of customers, business partners and trade show visitors. Personal data in email exchanges, sales history, trial download forms, trade show records and contracts may also have leaked. Credit card data and My Number were not included. [2]

An outside investigator's assessment is that the attacker entered the internal network through the company's VPN connection and ran ransomware. No publication elsewhere, spread on social media or other secondary damage had been found. [2]

It reported to the Personal Information Protection Commission and consulted the police. It introduced EDR, redesigned access rights, strengthened authentication and is working toward ISO 27001 certification. [2]