Vetstoria Ransomware Claim by Booba Project (Nov 2026)

Claim Summary

On or around November 3, 2026, the ransomware group known as Booba Project allegedly listed Vetstoria, a Swedish veterinary services and software provider, on its dark web leak site. According to the threat actor, approximately 5 GB of data was purportedly exfiltrated from the organization. The claim categorizes the victim under the Healthcare sector and references “Veterinary Services Stolen data.”

At this time, Yazoul Security has not independently confirmed that any data was actually taken, that the listed organization is the intended target, or that the attack occurred as described. The listing appears only on the group’s own leak site, which is a self-published and inherently unreliable source. Ransomware operators frequently post exaggerated or fabricated claims to pressure victims into paying. Readers should treat every detail below as an unverified allegation.

Threat Actor Profile

Booba Project is a relatively low-profile ransomware operation with limited publicly documented activity. Open-source intelligence provides no confirmed victim count, and the group’s total known victims remain unknown. Critically, there is no public research available describing the group’s tooling, infrastructure, or tactical playbook. Its known tools are currently undocumented in public reporting.

Because so little is verifiable about Booba Project, its credibility cannot be reliably assessed. Groups with sparse track records sometimes consist of opportunistic actors reusing leaked builder kits, while others are rebrands of established operations. Without corroborating research, Yazoul Security cannot confirm whether Booba Project possesses genuine capabilities or is simply reposting claims. No YARA rules or detection signatures specific to this group are publicly available at the time of writing. Defenders should rely on generic ransomware detection guidance rather than actor-specific indicators.

Alleged Data Exposure

The threat actor claims to hold roughly 5 GB of data described only as “Veterinary Services Stolen data.” No data samples, file listings, or proof-of-compromise artifacts have been independently reviewed by Yazoul Security, and none are reproduced here. The nature of the purported data - whether it includes client records, appointment data, or internal business files - is unknown. The 5 GB figure is the group’s own assertion and has not been validated. Organizations in the veterinary and animal-health space should note that such data can include pet owner contact details and payment information, but again, this is speculative based solely on the sector.

Potential Impact

If the claim is accurate, potential impacts could include exposure of client and operational data, regulatory obligations under GDPR given the Swedish jurisdiction, and reputational harm. Veterinary software providers may hold sensitive customer records, which could raise privacy concerns. However, none of this is confirmed. The actual scope, sensitivity, and even existence of the alleged dataset remain unverified.

What to Watch For

• Official statements from Vetstoria or its representatives.
• Any regulatory notifications under GDPR or Swedish data protection authorities.
• Corroborating reporting from independent security researchers.
• Follow-on activity such as phishing or extortion attempts referencing this claim.

Disclaimer

This report is based entirely on an unverified claim published by a ransomware group on its own leak site. Yazoul Security has NOT independently verified the attack, the data theft, the data volume, or the victim’s involvement. Nothing here should be treated as fact. Ransomware groups routinely exaggerate or fabricate claims. This content is provided for defensive awareness only and contains no PII, samples, credentials, or access information.