avans.com Listed by killsec Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On 9 October 2024, the organisation behind avans.com appeared on a ransomware group's leak site, with claims that internal files had been taken during an attack. For anyone who has dealt with the company—employees, partners, building managers or clients—the practical concern is straightforward: internal material may now sit outside the organisation's control, and the exact scope of what was copied remains unclear. When a firm that handles access systems and building infrastructure is listed in this way, the people connected to it face uncertainty about whether their details, contracts or operational information could be misused.

Public reporting so far is limited to the listing itself and the statement that internal files were allegedly exfiltrated. No confirmed figure for the number of people affected has been released, and the full contents of the material have not been independently verified. That leaves those potentially involved with incomplete information and a need to treat the claim seriously while waiting for clearer facts.

Inside the incident

According to the available record, avans.com was listed by the killsec ransomware group on 9 October 2024. The group asserts that internal files were exfiltrated as part of a ransomware attack. No further technical details—such as the initial access method, the duration of any intrusion, the volume of data taken, or the precise date the attack began—have been disclosed in the public summary. The number of people affected is listed as unknown. The only organisational description attached to the report is the company's own statement that it offers solutions for access, pedestrian flow control and vertical transportation for all types of buildings. Beyond the leak-site claim, independent confirmation of the breach's scale or success has not been provided in the facts available.

Inside killsec

Killsec is a ransomware operation that has maintained a public leak site used to name organisations it claims to have compromised. Like other groups in this category, it typically combines encryption of systems with the theft of data, then pressures victims by threatening to publish the material if demands are not met. Public reporting on killsec has documented a pattern of targeting a range of commercial and institutional entities, posting sample files or full archives on its site, and using those postings as leverage. The group has been observed to operate in multiple languages and to focus on data exfiltration as a core part of its model. In the case of avans.com, the listing constitutes a claim by the group that internal files were taken; that claim has not been independently verified in the information provided, and no additional statements attributed specifically to this incident beyond the listing itself appear in the record.

avans.com and its sector

avans.com presents itself as a provider of access solutions, pedestrian flow control systems and vertical transportation equipment for buildings of various kinds. Organisations in this sector typically design, supply or maintain systems that manage who enters a facility, how people move through it, and how elevators or similar equipment operate. They often work with property owners, construction firms, facility managers and security teams. Because their products sit at the intersection of physical security and building operations, they commonly hold technical documentation, client lists, installation records, maintenance contracts and internal project files. A breach involving such a firm is consequential because the data can reveal operational details of buildings, contact information for clients and staff, and proprietary technical material that could be useful to competitors or to anyone seeking to understand a facility's access arrangements. The sector's reliance on trust—clients expect their building systems and related information to remain confidential—means any confirmed exposure can affect ongoing relationships and future contracts.

What data was at risk

The facts state that internal files were exfiltrated in a ransomware attack. No more granular inventory—such as employee records, customer databases, financial documents or specific technical drawings—has been named. For a company of this type, internal files would ordinarily include project documentation, correspondence, system configurations, supplier and client information, and administrative records. Because the exact contents remain unconfirmed, it is not possible to state with certainty which categories of personal or commercial data were involved. The absence of a detailed disclosure means affected individuals and organisations must assume a broad range of internal material could be at risk until further information is released.

The real-world impact

For people whose information may have been among the internal files, the concrete risks include unwanted contact, phishing attempts that reference genuine project or contract details, and potential misuse of personal identifiers if any were present. Employees or contractors could face identity-related fraud or targeted social-engineering attempts. Clients whose building or access-system data appears in the material may need to review physical security arrangements or change credentials associated with those systems. For the organisation itself, the listing creates reputational pressure, possible contractual obligations to notify partners, and the operational cost of investigating and containing the incident. Because the number of people affected is unknown and the full data set has not been described, the scale of these effects cannot yet be measured. The impact remains a matter of potential exposure rather than a fully quantified event.

If your data was in this claimed breach

If you have a relationship with avans.com—as an employee, client, supplier or contact—treat the claim as a reason for caution. Change passwords on any accounts that may have been used in correspondence with the company, enable multi-factor authentication where available, and monitor financial and email accounts for unusual activity. Be sceptical of unexpected messages that reference building projects, access systems or contracts linked to the firm. Keep records of any suspicious contact. Readers can also run a free exposure scan of their email address to check whether their information has already appeared in known breach data sets. Until more precise details emerge, these steps reduce the chance that any exposed material can be turned into further harm.

AICompiled with AI assistance from public sources and published under our editorial standards.