Stormous Claims Data Theft from FANASA.COM
Summary
A ransomware.live monitoring record attributes to Stormous an unverified claim involving FANASA[.]COM and lists financial, tax, customer, vendor, and internal corporate records as allegedly exposed.
Key points
- The record names FANASA[.]COM as the victim and Stormous as the actor.
- It attributes the claim to Stormous and says the information is based on the group's public claims; the author cannot confirm its accuracy.
- The listed data includes electronic fiscal documents (CFDI/XML), financial transactions, invoices, RFC taxpayer IDs, customer and vendor records, and internal corporate documents.
- The record was discovered and published on May 3, 2026.
Article Details
- Victim
- FANASA.COM
- Victim Domain
- FANASA.COM
- Claim Date
- 2026-05-03
- Encryption Status
- Unknown; the source does not report whether data was encrypted.
- Exfiltration Status
- Unverified; the source reports a public group claim but does not independently confirm exfiltration.
- Exfiltrated Data
- The group claim lists PII, Electronic Fiscal Documents (CFDI/XML), financial transaction records, invoices and billing data, Taxpayer Identification Numbers (RFC), client and vendor data, and internal corporate documentation; authenticity is unconfirmed.
- Ransom Demand
- Not disclosed
- Leak Status
- A public group claim/listing was published on 2026-05-03; the source says it cannot confirm the information's accuracy.