Saudi Industrial Giant Rezayat Hit by Everest Ransomware, Data Leak Threatened The Everest ransomware cartel has claimed a breach of Rezayat Group, a multibillion-dollar Saudi industrial services provider operating across 13 countries with over 20,000 employees. Attackers allege they stole 10GB of data, including contracts, technical drawings, and employee records, though the full extent remains unverified. The gang posted samples on its dark web leak site to pressure Rezayat into paying a ransom. Cybernews researchers analyzed the leaked snippets, which revealed sensitive documents tied to Rezayat’s clients, raising concerns about supply chain risks and reputational damage. The breach could enable further attacks if stolen data is weaponized. Everest, active since 2021 and linked to the Russia-affiliated BlackByte group, has targeted over 100 victims in the past year, often exploiting compromised credentials and Remote Desktop Protocol (RDP) for access. The Middle East has become a high-priority target for cybercriminals, with Rezayat’s size and regional influence making it a prime mark. Rezayat, which spans engineering, manufacturing, and logistics, has yet to respond to inquiries. The incident underscores the growing threat of ransomware cartels leveraging stolen data for extortion and follow-on attacks.