www.pointcag.com Listed by kraken Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On November 13, 2025, the ransomware group kraken listed www.pointcag.com on its leak site, claiming to have carried out a ransomware attack that resulted in the exfiltration of internal files. The number of people affected is not known, and the organization has not issued a public statement confirming or detailing the incident. Ransomware groups continue to target organizations across multiple sectors by combining data theft with encryption demands. Listings on leak sites serve as a public signal when negotiations fail or are bypassed, adding pressure on the affected entity while exposing limited information about the underlying compromise.

Breaking down the breach

The only confirmed detail available is the listing itself on November 13, 2025. No information has been released about the date or method of initial access, the volume of data taken, or whether encryption was also deployed against systems. The group claims internal files were exfiltrated, but independent verification of that claim has not been made public.

The group behind it: kraken

Kraken is a ransomware operation that follows the common pattern of encrypting victim systems and threatening to publish stolen data. Such groups typically maintain a leak site where they name organizations that have not met their demands. The listing of www.pointcag.com constitutes the group’s assertion of responsibility; no separate confirmation from law enforcement or the victim has been recorded in available reporting.

Who is www.pointcag.com?

www.pointcag.com operates as POINT, a firm that supplies construction management consulting and litigation support services. Organizations in this sector routinely manage project documentation, contract records, scheduling data, and communications between contractors, owners, and legal teams. A compromise at such a firm can intersect with both commercial operations and ongoing legal matters.

What data was at risk

The listing states that internal files were exfiltrated. No further breakdown of file categories or record counts has been disclosed. Organizations providing construction management and litigation services commonly store project plans, financial records, correspondence, and regulatory filings, yet the precise contents of any exfiltrated material remain unconfirmed beyond the general description of internal files.

Why it matters

Construction management and litigation records can contain details about active projects, cost structures, and disputes. Exposure of such material may create commercial or legal complications for the firm’s clients even if the direct impact on individuals is not yet quantified. The absence of a confirmed count of affected people leaves the scope of personal data exposure unclear.

Were you affected?

Individuals who have worked with POINT or its clients should monitor official statements from the organization for any notification process. A practical first step is to review recent account activity and enable multi-factor authentication on any services that may share data with the firm. Readers can also run a free exposure scan of their email address against known breach data sets to check for prior appearances in public listings.

AICompiled with AI assistance from public sources and published under our editorial standards.