Ransomware

NightSpire Reports an Attack Against BranchCore Technology C.A.

In May 2025, the NightSpire ransomware group claimed responsibility for a cyberattack against the Venezuelan IT company BranchCore Technology C.A. The threat actor claimed to have stolen 50 GB of data, with an estimated compromise date of May 18, 2025, and a planned leak date of May 22, 2025. It is unclear whether any data was actually leaked or whether the company suffered any financial losses.

Overview

Missing evidence

It is unclear whether any data was actually leaked, what specific data was compromised, or whether the company suffered any financial losses.

Impact details

NightSpire has included BranchCore Technology C.A. on its list of victims of ransomware or data breaches. Several security trackers and reports support this claim, but do not confirm encryption, service disruption, or the authenticity of the data.

Classification & severity

Category
Malicious code
Subtype
Ransomware
Confidence
Medium

Ransomware.live, Breachsense, Hackmanac, and HookPhish are reporting on an incident involving the NightSpire ransomware and a leak site targeting BranchCore; publicly available evidence does not confirm encryption, service disruption, or the authenticity of the data.

Severity assessment

Medium
Information impact
Suspected
Affected scope
Organization-wide
Critical service
None
Public confidence
Limited
Recoverability
Extended

Public sources support a claim by NightSpire regarding ransomware and a leak site, but there is no validated information regarding leaked data, encryption, service disruption, or material impact.

Data exfiltration· Claimed Confidentiality

Timeline

Claim

NightSpire listed BranchCore Technology C.A. as an alleged victim.

Evidence & sources

6 sources