A Dutch citizen, Fouad Eltibrizi, also known as Archduke, was arrested in the UK as part of an international operation against the ransomware group KillSec. Eltibrizi is accused of participating in cyberattacks that stole and leaked approximately 180 gigabytes of information from a company in Puerto Rico, including patient data. The US federal prosecutor in Puerto Rico, Héctor Ramírez Carbó, stated that Eltibrizi and his accomplices carried out targeted intrusions against multiple companies and organizations, stealing confidential information and attempting to extort substantial sums of money.
The indictment alleges that between March and November 2025, Eltibrizi and other KillSec members exploited security vulnerabilities to access their victims' systems, steal confidential information, and store it on servers located abroad. The group published samples of the stolen files on the dark web and demanded payment from the affected organizations under threat of divulging or selling the information. Similar attacks were also carried out against victims in California, Washington, and Louisiana.