HackerFeeds
All ransomware incidents
alfuttaim.com

Ransomware group everest hits Al-Futtaim Group

MEDIUM
·Retail & E-Commerce·AE·2026-07-21

Al-Futtaim Group — a retail & e-commerce target operating in AE has been listed by the everest ransomware group on 2026-07-21. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.

Incident Report

Target OrganizationAl-Futtaim Group
Threat Group
everest
Summary[AI generated] Al-Futtaim Group is a diversified conglomerate headquartered in Dubai, United Arab Emirates. Founded in the 1930s, it operates across retail, automotive, real estate, and financial services sectors. The group represents major global brands including IKEA, Toyota, and Marks & Spencer across the Middle East, Africa, and Asia. It is one of the region's most prominent privately held business enterprises.
Date of Breach2026-07-21
Discovery Date2026-08-05
RegionAE
Target Domainalfuttaim.com
Business SectorRetail & E-Commerce
Severity
MEDIUM

Claim by everest

[AI generated] Al-Futtaim Group is a diversified conglomerate headquartered in Dubai, United Arab Emirates. Founded in the 1930s, it operates across retail, automotive, real estate, and financial services sectors. The group represents major global brands including IKEA, Toyota, and Marks & Spencer across the Middle East, Africa, and Asia. It is one of the region's most prominent privately held business enterprises.

Posted by the everest threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.

Sources

Victim website

alfuttaim.com

Leak post (onion / Tor)

tor

http://everestndkvzcibcje2cqxhre2hmmybl3rn2gwzwsblz7gx6uryn5rad.onion/news/al-futtaim-group

Open this URL in Tor Browser. Browsing leak sites carries real risk — view passively, never click further.

Disclaimer

HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.