Cognity (cognity.gr) Listed by fog Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On December 16, 2024, the ransomware group known as fog listed Cognity (cognity.gr) among its claimed victims, asserting that it had exfiltrated 36 GB of internal files. For anyone whose personal or professional details may sit inside those files, the practical stakes are immediate: the risk that private information could be published, sold, or used for further fraud if the claim proves accurate. Public detail remains limited, and the number of people affected is unknown, yet the listing alone is enough to warrant careful attention.

This article sets out only what has been reported, places the claim in context, and outlines the concrete steps individuals can take while the full picture is still incomplete.

Inside the incident

According to the group’s leak-site listing dated December 16, 2024, fog claims to have conducted a ransomware attack against Cognity and to have removed 36 GB of internal files. No further technical details—such as the initial access method, the precise date of intrusion, or whether encryption was also deployed—have been made public. The volume of data cited is the only quantitative figure supplied; the number of individuals whose information may be contained in those files remains undisclosed. At present the listing itself constitutes an unverified claim by the threat actor rather than an independently confirmed breach report.

Who is fog?

Fog is a ransomware operation that has been active in recent years and is known for the double-extortion model common among contemporary groups: encrypting systems while simultaneously stealing data and threatening to publish it if a ransom is not paid. The group maintains a dedicated leak site where it posts victim names, sample files, and countdown timers. Public reporting has linked fog to attacks on organisations across multiple sectors and geographies; its typical tactics include exploiting remote-access services, deploying custom ransomware binaries, and using the threat of data leaks to increase pressure. In this case, fog’s sole public statement is the listing of Cognity and the assertion that 36 GB of internal files were taken. No additional claims specific to this victim have been released.

Who is Cognity (cognity.gr)?

Cognity is a Greek company operating under the domain cognity.gr and active in the information-technology and digital-services sector. Organisations of this type typically provide consulting, software development, systems integration, and related professional services to corporate and public-sector clients. Because such firms routinely handle client contracts, employee records, project documentation, and technical configurations, a breach of their internal systems can expose both their own workforce and the customers they serve. The consequential nature of an incident here therefore extends beyond the company itself to any third parties whose data may have been stored or processed on Cognity’s infrastructure.

What was likely exposed

The only data type named in the public claim is “internal files” said to have been exfiltrated in a ransomware attack, with a reported volume of 36 GB. No inventory of file categories—such as employee personal data, client records, financial documents, or source code—has been released. Organisations in the IT-services sector commonly hold human-resources files, customer contracts, authentication credentials, and proprietary project materials; any or all of these could theoretically be present. Because the exact contents remain unconfirmed, it is not possible to state with certainty which specific categories of information were taken.

The real-world impact

For individuals whose data may be among the 36 GB, the primary risks are identity theft, targeted phishing, and unsolicited contact that leverages knowledge of their employment or business relationships. Even partial exposure of names, email addresses, or internal project details can enable more convincing social-engineering attempts. For Cognity itself, the claim raises the possibility of operational disruption, regulatory scrutiny under European data-protection rules, and reputational harm among clients who entrust the firm with sensitive information. Until independent verification occurs, both the scale of personal harm and the organisational consequences remain estimates rather than established facts.

If your data was in this claimed breach

If you have a past or present connection to Cognity—whether as an employee, contractor, or client—treat the claim as a prompt for basic hygiene rather than confirmed compromise. Change passwords on any accounts that may have been linked to the company, enable multi-factor authentication where available, and monitor financial and email accounts for unusual activity. Be alert to phishing messages that reference Cognity projects or colleagues. Readers can also run a free exposure scan of their email address to check whether their information has already surfaced in known breach data sets. Public detail on this incident is still limited; further confirmed information, if it emerges, will clarify the actual scope of exposure.

AICompiled with AI assistance from public sources and published under our editorial standards.