Matouk Bassiouny Listed by raworld Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On October 25, 2024, the ransomware group raworld listed Matouk Bassiouny, a Cairo-based law firm, among its claimed victims. Public details remain limited: the listing asserts that internal files were exfiltrated in a ransomware attack, but the number of people affected is unknown and no further technical specifics have been disclosed. For a firm that handles sensitive legal matters for corporations and businesses across the region, even an unverified claim of this kind raises immediate questions about the security of client and internal information.

The incident matters because law firms routinely hold confidential material that, if exposed, can affect not only the organisation but also the individuals and companies that rely on its services. At present the claim rests solely on the group's leak-site listing; independent confirmation of the breach's scope or success has not been made public.

What happened

According to the available record, Matouk Bassiouny was listed by the raworld ransomware group on October 25, 2024. The group claims that internal files were exfiltrated as part of a ransomware attack. No public information has been released about the precise date the intrusion began, how access was obtained, whether encryption was deployed, or the volume of data involved. The number of individuals potentially affected remains unknown. All that is currently established is the group's assertion that data was taken and the firm's subsequent appearance on the raworld listing.

Who is raworld?

Raworld is a ransomware operation that follows the now-common double-extortion model: after gaining access to a network, operators claim to steal data and then threaten to publish it unless a ransom is paid. Like other groups of this type, raworld maintains a leak site where it posts the names of organisations it says it has compromised, sometimes accompanied by sample files or countdown timers. Public reporting on the group describes it as relatively recent in the ransomware landscape, with activity focused on a range of sectors rather than a single industry. Its listings are claims made by the actors themselves; they are not independent verification that a breach occurred or that the stated data was in fact taken. In the case of Matouk Bassiouny, the only public statement is the listing itself.

Matouk Bassiouny and its sector

Matouk Bassiouny is a prominent law firm headquartered in Cairo, Egypt. It is known for work in arbitration, corporate law and dispute resolution, serving both multinational corporations and local businesses across multiple sectors. The firm maintains a strong regional presence and is recognised for its legal team and client-focused practice. Law firms of this kind routinely manage privileged communications, contracts, litigation files, corporate records and personal data belonging to clients, employees and counterparties. Because legal work depends on confidentiality, any unauthorised access to a firm's systems carries particular weight for the people and organisations whose matters are handled there.

What was likely exposed

The only data type named in the public record is "internal files" said to have been exfiltrated. No inventory of those files, no count of records, and no confirmation of specific categories such as client names, financial documents or personal identifiers has been released. Organisations in the legal sector typically hold correspondence, case materials, contracts, identity documents and other sensitive records. Whether any of those categories were among the files claimed by raworld remains unconfirmed. Readers should treat the exact contents as unknown until the firm or independent investigators provide further detail.

Why it matters

If internal files from a law firm are exposed, the practical risks include misuse of confidential client information, potential identity-related fraud for individuals named in the material, and competitive or legal disadvantage for the businesses involved. For the firm itself, the consequences can include regulatory scrutiny, loss of client trust and the operational cost of investigation and remediation. Even when the full scope is still unclear, the mere claim of exfiltration is enough to prompt those who have dealt with the firm to monitor for unusual activity. The absence of confirmed numbers or data categories does not eliminate the need for caution; it simply means the precise level of exposure cannot yet be measured.

Were you affected?

If you are a current or former client, employee or counterpart of Matouk Bassiouny, treat the situation as a prompt to review your own security posture. Change passwords associated with any accounts that may have been used in correspondence with the firm, enable multi-factor authentication where available, and watch bank and credit statements for unexpected activity. Because the number of people affected and the precise data involved remain unknown, there is no public list of victims to check against. As a practical next step, you can run a free exposure scan of your email address to see whether it has already appeared in other known breach data sets; that check will not confirm or rule out involvement in this specific incident, but it can surface other exposures that warrant attention.

AICompiled with AI assistance from public sources and published under our editorial standards.