HackerFeeds
All ransomware incidents
i2i-systems.com

Ransomware group Barracuda hits i2i-systems

MEDIUM
·Technology·TR·2026-09-13

i2i-systems — a technology target operating in TR has been listed by the Barracuda ransomware group on 2026-09-13. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.

Incident Report

Target Organizationi2i-systems
Threat Group
Barracuda
SummaryThis is one of the most poorly secured companies we have ever encountered. Over the course of a week, we analyzed the infrastructure and moved freely across their network. The infrastructure lacked proper security configurations, and the IT department showed a complete disregard for the data. As a result of the attack, 693 gigabytes of data were exfiltrated. We downloaded the complete source code for the following projects: Caplan DataGov-Dev-Docker DDR DDR-Veriskop DFE-Dev Kangal-Dev SDD-DEV-DOCKER SDD-MAIN commonprojects.zip Copycat.zip CopycatLive.zip datacat.war datagov.war Kangal-Dev.zip Kangal-Master.zip SDD-DEV-DOCKER@2.zip smartdq.war The volume of exfiltrated source code totaled 44 gigabytes. The data includes a full snapshot of the latest releases from the development repository. i2i-systems has a direct connection to the information security company Veriskop; therefore, this breach directly affects them as well. In addition, i2i-systems engaged in joint projects with partners such as Vodafone, Etiya, Bouygues, Freedom Mobile, and others; this is evidenced by the Linux servers located within the i2i-systems infrastructure: 1864654005 backup_Veriskop-SQA1.local_2026-08-31_203808.tar.gz 3292962897 copycat2019.i2isystems.local_critical_backup_2026-08-31_19-30-29.tar.gz 18422354 critical_backup_bouygues_fcbs_batch2.local_20260830_221815.tar.gz 2231188487 etiya-mobile-test-01.local_backup_20260831_213207.tar.gz 20546323810 freedom-mobile1-critical-vault.tar.gz 1050673952 freedom-mobile2-secrets-20260830-232814.tar.gz 721661 maya-redhat7-9_2026-08-30_233036.tar.gz 22966288270 ol8-10-innobi_full_backup_20260831_022640.tar.gz 529695763 veriskop-db-critical-backup-2026-08-31_234418.tar.gz 13012999372 veriskop-fiziksel-yedek-20260831023535.tar.gz 309528511 veriskop-oracle-critical-backup-2026-08-31_203340.tar.gz 633604141 veriskop-rhel-7.local_critical_backup.tar.gz 4878999722 Veriskoptest01.local_backup_20260831_213236.tar.gz 238487575 Veriskoptest02.local_critical_backup_20260831_213052.tar.gz 33936543608 veriskoptest03_critical_backup_2026-08-31.tar.gz We have extracted absolutely all critical data from these infrastructure Linux systems and created a snapshot of the databases. In addition, i2i-systems recently launched a joint project with Turk Telekom—we have downloaded the database containing all their customers. The data will be published soon... | Severity: HIGH | Size: 643 GB | Status: selling | 300000$
Date of Breach2026-09-13
Discovery Date2026-09-13
RegionTR
Target Domaini2i-systems.com
Business SectorTechnology
Severity
MEDIUM

Claim by Barracuda

This is one of the most poorly secured companies we have ever encountered. Over the course of a week, we analyzed the infrastructure and moved freely across their network. The infrastructure lacked proper security configurations, and the IT department showed a complete disregard for the data. As a result of the attack, 693 gigabytes of data were exfiltrated. We downloaded the complete source code for the following projects: Caplan DataGov-Dev-Docker DDR DDR-Veriskop DFE-Dev Kangal-Dev SDD-DEV-DOCKER SDD-MAIN commonprojects.zip Copycat.zip CopycatLive.zip datacat.war datagov.war Kangal-Dev.zip Kangal-Master.zip SDD-DEV-DOCKER@2.zip smartdq.war The volume of exfiltrated source code totaled 44 gigabytes. The data includes a full snapshot of the latest releases from the development repository. i2i-systems has a direct connection to the information security company Veriskop; therefore, this breach directly affects them as well. In addition, i2i-systems engaged in joint projects with partners such as Vodafone, Etiya, Bouygues, Freedom Mobile, and others; this is evidenced by the Linux servers located within the i2i-systems infrastructure: 1864654005 backup_Veriskop-SQA1.local_2026-08-31_203808.tar.gz 3292962897 copycat2019.i2isystems.local_critical_backup_2026-08-31_19-30-29.tar.gz 18422354 critical_backup_bouygues_fcbs_batch2.local_20260830_221815.tar.gz 2231188487 etiya-mobile-test-01.local_backup_20260831_213207.tar.gz 20546323810 freedom-mobile1-critical-vault.tar.gz 1050673952 freedom-mobile2-secrets-20260830-232814.tar.gz 721661 maya-redhat7-9_2026-08-30_233036.tar.gz 22966288270 ol8-10-innobi_full_backup_20260831_022640.tar.gz 529695763 veriskop-db-critical-backup-2026-08-31_234418.tar.gz 13012999372 veriskop-fiziksel-yedek-20260831023535.tar.gz 309528511 veriskop-oracle-critical-backup-2026-08-31_203340.tar.gz 633604141 veriskop-rhel-7.local_critical_backup.tar.gz 4878999722 Veriskoptest01.local_backup_20260831_213236.tar.gz 238487575 Veriskoptest02.local_critical_backup_20260831_213052.tar.gz 33936543608 veriskoptest03_critical_backup_2026-08-31.tar.gz We have extracted absolutely all critical data from these infrastructure Linux systems and created a snapshot of the databases. In addition, i2i-systems recently launched a joint project with Turk Telekom—we have downloaded the database containing all their customers. The data will be published soon... | Severity: HIGH | Size: 643 GB | Status: selling | 300000$

Posted by the Barracuda threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.

Sources

Victim website

i2i-systems.com

Leak post (onion / Tor)

tor

mailto:writetousbrkd@2mail.co

Open this URL in Tor Browser. Browsing leak sites carries real risk — view passively, never click further.

Disclaimer

HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.