Dubai International Financial Centre · Breach

Reze ransomware leaks alleged DIFC documents, threatens daily releases

Oct 26, 2026 · 1 min read

The Reze ransomware group has published files it claims were stolen from the Dubai International Financial Centre (DIFC), labeled as passport copies, visa records, work permits, telecommunications approvals, and contact information. The release follows a $5 million ransom demand, and the group threatens to publish more files daily. The documents' authenticity has not been independently verified; organizations with DIFC-linked data should monitor the leaks.

By HIFY Radar newsroom Updated 10/26/2026 01:53 PM Get this every day →← Back to the feed 1 source

MediumBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

The Reze ransomware group has published files it claims were stolen from the Dubai International Financial Centre (DIFC), a major financial hub in Dubai. The release is labeled as passport copies, visa records, work permits, telecommunications approvals, and contact information. The group says it will publish more files every day.

Why it matters

The disclosed material involves personal identity data, creating fraud and phishing risks for affected individuals. Companies with operations or records tied to DIFC could see sensitive data exposed. The documents' authenticity has not been independently verified.

What to do

Check whether your organization holds data or records tied to DIFC and map what could appear in the leaks. Warn staff about likely phishing and identity fraud attempts. Track the daily releases announced by Reze.

For the technical team

Affected: Dubai International Financial Centre (DIFC) · Dubai International Financial Centre (DIFC), alleged target; compromise not confirmed in the sources.
Exploitation: Ongoing leak: Reze published one batch of files and threatens daily releases, after a $5 million ransom demand. Reported by @DarkWebInformer; authenticity and extent of the alleged compromise have not been independently verified.
Fix: Not applicable: alleged data breach, no software fix disclosed.
More details: Leaked documents, per the group, include passport copies, visa records, work permits, telecommunications approvals, and contact information. Reze accuses DIFC of ignoring the breach. No official confirmation from DIFC in the sources.