Barakat Travel Co Listed by unsafe Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On 21 December 2022, Barakat Travel Co, a travel company based in Lebanon, was listed by the ransomware group known as unsafe. Public reporting states that internal files were exfiltrated in a ransomware attack. The number of people affected remains unknown, and further operational details have not been disclosed.

The listing itself is a claim published by the group. What is confirmed in available records is limited to the organisation’s name, the reported date, the country, an approximate revenue figure of 5 million, and the description of internal files taken during the incident. No independent confirmation of the full scope has been provided in the material at hand.

Inside the incident

According to the reported summary, Barakat Travel Co appeared on unsafe’s listings on 21 December 2022. The available facts describe the event as a ransomware attack in which internal files were allegedly exfiltrated. No public detail has been released on the initial access method, the duration of any intrusion, whether systems were encrypted, or any ransom demand. The scale of the incident—how many systems or records were involved—is undisclosed. People affected are listed as unknown. The only geographic and financial markers given are the country code LB and a revenue figure of 5.00M. Beyond the claim that internal files left the organisation, the concrete contents and volume of those files remain unconfirmed in the public record.

Who is unsafe?

Unsafe is a ransomware group that has operated by compromising organisations, exfiltrating data, and publishing victim names on leak sites as part of a double-extortion model. Like other groups in this category, it typically pressures victims by threatening to release stolen material if payment is not made. Public reporting on the group’s broader activity has documented listings of companies across multiple sectors and regions; those patterns are well-established in open sources. With respect to Barakat Travel Co specifically, the only assertion tied to this incident is the group’s own listing claim that internal files were taken. No additional statements attributed to unsafe about this victim appear in the facts provided, and the listing should be treated as an unverified claim unless separately confirmed.

About Barakat Travel Co

Barakat Travel Co is identified as a travel company operating in Lebanon, with a reported revenue on the order of 5 million. Organisations in the travel sector commonly handle customer booking records, identity and contact details, payment-related information, itineraries, and internal commercial documents such as contracts, supplier data, and employee records. A breach affecting such an entity raises concern because travel firms sit at the intersection of personal data and financial transactions; any unauthorised access can expose both individual travellers and the company’s own operational material. The consequences are therefore not limited to the organisation’s internal systems but can extend to customers and partners who entrusted information to it.

The information in question

The facts name the exposed material only as “internal files exfiltrated in ransomware attack.” No further breakdown—such as customer databases, financial ledgers, employee files, or specific document counts—is supplied. Exact contents are therefore unconfirmed. Travel companies of this type typically hold passport or identity data, contact details, booking histories, payment card or billing information, and internal correspondence. Whether any of those categories were among the files taken in this case is not stated in the available record. Readers should treat the precise nature of the data as unknown pending further disclosure.

Why it matters

When internal files leave an organisation through a ransomware incident, the practical risks include identity misuse, targeted phishing that references real travel or booking details, and potential fraud against individuals whose information may have been present. For the company, exposure of commercial or operational documents can affect supplier relationships, competitive position, and regulatory obligations under applicable data-protection rules. Because the number of people affected is unknown and the exact data types are not itemised, the full extent of individual harm cannot yet be measured. The absence of confirmed counts does not eliminate the need for caution; it simply means affected parties must rely on general protective steps until more is known.

Were you affected?

If you have been a customer, employee, or partner of Barakat Travel Co, consider the following practical steps:

• Monitor financial and email accounts for unexpected activity or messages that reference travel bookings or personal details you shared with the company.
• Change passwords on any accounts that reused credentials associated with Barakat Travel Co services, and enable multi-factor authentication where available.
• Be alert to phishing attempts that appear to come from travel providers or that cite itinerary or payment information.
• Review bank and card statements for unauthorised charges and report them promptly.
• Run a free exposure scan of your email address to check whether your information has already surfaced in known breach data sets.

Public detail on this incident remains limited. Further official statements from the organisation or independent verification would be required to clarify scope and next steps. Until then, the measures above offer a measured starting point for anyone who may have a connection to the company.

AICompiled with AI assistance from public sources and published under our editorial standards.