ASBIS CZ, spol. s r.o. Listed by avaddon Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On September 9, 2021, the ransomware group Avaddon listed ASBIS CZ, spol. s r.o. on its leak site and stated that it had taken internal files from the organisation. No figure for the number of individuals affected has been released, and the precise contents of any exfiltrated material remain undisclosed. The incident is one of many similar listings that appeared on the same platform during 2021. Its practical significance lies in the possibility that documents or records held by the company could contain information about employees, customers or business partners.

Breaking down the breach

Public records show only that ASBIS CZ, spol. s r.o. appeared on the Avaddon leak site on the reported date. The group claims to have stolen internal data during a ransomware operation, yet no independent confirmation of the volume, file types or method of access has been published. The number of people whose information may be involved is listed as unknown.

Inside avaddon

Avaddon operated as a ransomware affiliate program that relied on double-extortion tactics: encrypting systems and threatening to publish stolen material if a ransom was not paid. The group maintained a public leak site where it posted names of organisations it claimed to have targeted. Listings on that site constituted the group’s own assertions rather than verified events.

Who is ASBIS CZ, spol. s r.o.?

ASBIS CZ, spol. s r.o. functions as the Czech subsidiary of the ASBIS group, an information-technology distributor that supplies hardware, software and related services to businesses across Central and Eastern Europe. Organisations of this type routinely hold records on corporate clients, supply-chain partners, employee data and contractual documentation. A compromise at such an entity can therefore touch both commercial relationships and personal information held in the ordinary course of business.

The information in question

The only detail released is that internal files were claimed to have been exfiltrated. No inventory of specific data categories has been made public. In the absence of further disclosure it is not possible to state which records, if any, were taken.

Why it matters

Internal files held by an IT distributor can include contact details, account credentials, pricing agreements or technical specifications. If such material later appears in public or on underground forums, affected individuals may face increased risk of targeted phishing, account takeover or misuse of corporate information. The organisation itself faces potential regulatory scrutiny and the need to review access controls and incident response procedures.

If your data was in this claimed breach

Individuals who have done business with ASBIS CZ, spol. s r.o. or its parent group can take the following steps while waiting for any official notification:

• Monitor bank and email accounts for unusual activity.
• Change passwords for any accounts linked to the organisation and enable multi-factor authentication where available.
• Review privacy settings on professional profiles and limit the personal data shared with vendors.
• Run a free exposure scan of their email address against known breach data sets to check for prior appearances.

AICompiled with AI assistance from public sources and published under our editorial standards.