Inter-American Tropical Tuna Commission (IATTC) Listed by minteye Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
The Inter-American Tropical Tuna Commission (IATTC) was listed by the minteye ransomware group on December 12, 2025, after internal files were exfiltrated in an attack whose timing remains unknown. Individuals whose information may be included in the exposed files should review the posted data and take any recommended protective steps.
Breaking down the breach
The only Reported Details are the date the listing appeared and the claimed volume of data. The group asserts that internal files were taken, but provides no further breakdown of file categories or specific systems accessed. Timing of the initial intrusion, the method of entry, and whether any data was subsequently published remain undisclosed. The number of people whose information may be involved is also unknown at this stage.
The group behind it: minteye
Minteye is a ransomware operation that maintains a public leak site where it lists organizations it claims to have targeted. The group typically announces incidents by posting victim names alongside assertions about data volume and encryption. Its listings are presented as claims by the group itself and are not independently verified at the time they appear. Similar activity by the same actor has been documented against other entities in prior months, following the pattern of initial access, data exfiltration, and public notification.
Who is Inter-American Tropical Tuna Commission (IATTC)?
The IATTC is an intergovernmental body established to manage tuna and related species in the eastern Pacific Ocean. It collects and maintains scientific, fisheries, and compliance data contributed by member nations. Organizations of this type routinely hold records on vessel activity, catch statistics, research surveys, and administrative correspondence. A breach at such an entity raises questions about the handling of operational information that supports international fisheries management.
The information in question
The listing refers only to “internal files” totaling 2.3 TB. No inventory of specific data categories has been released, and the organization has not confirmed which systems or records were involved. The exact contents therefore remain unconfirmed.
- Organization listed: Inter-American Tropical Tuna Commission (IATTC)
- Claimed data volume: 2.3 TB of internal files
- Date reported: December 12, 2025
- Number of individuals affected: not disclosed
Why it matters
Even without a confirmed list of exposed records, the exfiltration of internal files from a fisheries-management body can affect ongoing scientific work and cooperative agreements among nations. If personal or commercial identifiers are present in those files, individuals or companies could face follow-on risks such as targeted phishing or misuse of operational details. The absence of a disclosed victim count means the scale of any downstream impact cannot yet be assessed.
If your data was in this claimed breach
Monitor official statements from the IATTC for any future notifications. Review account activity on any services linked to fisheries or international organizations and enable multi-factor authentication where available. Individuals can also run a free exposure scan of their email address against known breach data to check for prior appearances of their information.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
Cranford, Buckley, Schultze, Tomchin, Allen & Buie, P.A. Listed by minteye Ransomware GroupSponseller Group, Inc. Listed by minteye Ransomware GroupDavid M. Schwarz Architects Listed by minteye Ransomware GroupKeylogistics Chile SA Listed by minteye Ransomware GroupLatest breaches
Publicly posted by minteye — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.