DisclosureLens
GLOBALUnknownRansomwareStormousLow

Fractal ID

bd_06e19fda6cc806b4 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jul 14, 2024

To disclose

—

Affected

Not disclosed

Linked

2 filings

Confidence

60%
Full breach record for Fractal ID →

Press / market disclosure — not a breach-notification filing

A media or market posting that confirms an incident but carries no breach-notification fields, so compliance clocks aren't assessable. The summary below is extracted from the coverage — verify against the source.

Exclusive: Stormous ransomware gang claims hack of blockchain identity firm Fractal ID - Cyber Daily. Fractal ID: The Stormous ransomware group claims to have hacked blockchain company Fractal ID, stealing more than 10 GB of sensitive data, including credentials for over 300,000 users, including cryptocurrency addresses. The stolen data includes personal photos, bank account statements, proof of address, and scans of identity documents. This is the second time this year that Fractal ID has been the victim of a cyberattack, following a previous data breach in July. Linked ransomware group: stormous.

Incident timeline — mostly unverified

? — ?

Breach window unknown

Jul 14, 2024

Press report

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Attack → press

—

Compliance clock

Not assessable

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market reportThis record

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source ceiling

  • incident type + narrative only (may be machine-translated)
  • discovery date
  • materiality
  • affected count
  • data types
  • compliance clock

The ✕ fields stay blank until a regulatory filing or victim disclosure lands.

About this groupFirst seen 2022-03-22

stormous

According to ransomware.live, Stormous is an Arabic-speaking, pro-Russian ransomware and hacktivist group active since at least 2022, known for politically motivated attacks across 15+ countries, collaborating with GhostSec on the GhostLocker 2.0 RaaS platform and inheriting GhostSec's RaaS operations in mid-2024.

202 tracked hereFull profile →