GLOBALMalwareGovernmentGovernmentRansomwareEverestRansom DemandedActor NamedData Leak ThreatenedData PublishedHigh

Department of Culture and Tourism Abu Dhabi - Download link

bd_bce959e77d2891b4 · schema v1 · pii pii-v1

Full breach record for Department of Culture and Tourism Abu Dhabi - Download link →

Threat-actor claim — not a regulatory filing

This row is a claim by the ransomware group Everest on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.

Group activity: Public SectorDiscovered: 2025-05-26

View aggregator listing on ransomware.live

Source: Ransomware.live

Post text · scraped from the leak site

The Department of Culture and Tourism - Abu Dhabi (DCT Abu Dhabi) drives the emirate's cultural agenda while stimulating its economic growth. Its mission revolves around conserving and promoting the heritage and culture of Abu Dhabi. It organizes festivals, develops museums, and manages libraries, while also overseeing the tourism sector, enhancing the emirate's status as a destination of distinction.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Unverified claimView incident

No regulatory filing corroborates this yet. If an SEC 8-K, state-AG notice, or victim statement lands, DisclosureLens will merge it into an incident and link it here.

Source provenance

Source URL: https://www.ransomware.live/id/RGVwYXJ0bWVudCBvZiBDdWx0dXJlIGFuZCBUb3VyaXNtIEFidSBEaGFiaUBldmVyZXN0
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 26, 2025
Raw hash: 2ee8e7a348c90625e56d6bc18e6cedf10c25f9c24701285f1de4b94e0948ca82

Reporting entity

Name: everest

Victim entity

Name: Department of Culture and Tourism Abu Dhabi - Download link
norm: department of culture and tourism abu dhabi download link
Domain: dct.gov.ae
Industry: Governmentllm

What this source establishes

Source ceiling: A leak-site claim can't tell us: discovery date · materiality · notification · affected count · confirmed data types · compliance clock. These stay blank until a regulatory filing or victim disclosure lands.
Attack vector: Ransomware· everest
Threat actor: EverestExternalFinancial

Compliance

Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.