Nordic’s largest Apple Premium partner breached, hackers claim

Humac, a major Apple products reseller in the Nordics, has appeared on a ransomware gang’s dark web leak site, together with supposedly stolen company details.

Humac's name appeared on the Kraken ransomware cartel's dark web blog, which the gang uses to showcase its latest victims. The attackers claim to have obtained company financials, customer data, and other sensitive details.

We have reached out to the company for confirmation and will update the article once we receive a reply. Humac is owned by Italian company C&C, Europe's largest Apple Premium Partner with over 120 stores throughout the continent.

The Cybernews researchers investigated the attackers’ claims, concluding that the data sample appears legitimate. According to the team, it provided only a snippet of supposedly stolen data, including employee data, numerous internal files, business operational files, database samples, and other information.

Ransomware attacks can be particularly impactful to companies whose business relies on specific partnerships for valuable brands. That’s precisely why cybercrooks target these types of companies, as they often harbor valuable information.

“Insiders are among the most valuable people in the fraud business. Leaked employee data could allow targeted phishing campaigns to obtain insider-level access to the Apple support platforms. Let's not forget the vast amount of personal customer data, from their contacts and addresses to their financing-related information, which is always sought after,” the team said.

Who is Kraken ransomware?

Kraken is a relative newcomer to the ransomware underworld. First observed in February 2025, the gang emerged from the ashes of the HelloKitty ransomware cartel. Researchers believe that Kraken may have been set up by some of HelloKitty’s former members.

Meanwhile, HelloKitty ransomware changed course and rebranded as HelloGookie in April last year. Ransomware gangs often change their makeup and rebrand, trying to stay under the radar.

According to Cybernews’ dark web monitoring tool, Ransomlooker, Kraken has victimized at least 13 organizations in 2025.