Istanbul, September 13 — The ransomware group Barracuda has claimed responsibility for a cyberattack on i2i-systems, a major telecommunications company based in Turkey, in an incident that saw a vast trove of sensitive data taken from the firm’s systems. The claim, posted on the dark web, was reported by the threat intelligence platform DeXpose, which monitors such sources.
According to the report, the attackers exfiltrated hundreds of gigabytes of data, including source code for key projects, and have threatened to make the material publicly available if their demands are not met.
What was taken, and why it matters
The stolen material is proprietary source code — the kind of intellectual property that sits at the core of a technology company’s work. Its exposure could carry both commercial and security risks, and the source material does not specify which projects the code belonged to. Telecommunications infrastructure is widely treated as critical infrastructure, and attacks on it can have cascading effects well beyond the company itself.
For communities and families across the region who depend on phone and data networks every day, the disruption or compromise of a major operator is never a distant technical problem. The source material does not state the exact ransom demand, how long the attack lasted, or whether i2i-systems has responded publicly.
No statement from either the company or the Barracuda group beyond the claim itself has been reported.
A pattern that keeps repeating
Ransomware attacks are increasingly targeting both large enterprises and mid-sized organizations across every sector, according to the source material. The i2i-systems case is part of that broader trend rather than an isolated event. DeXpose, which reported the incident, specializes in early detection and proactive defense through a hybrid threat intelligence solution.
Its approach combines automated deep and dark web crawling, monitoring of Telegram and forums, and verification by real analysts. The platform says it does not engage in the exfiltration, hosting, redistribution, or purchase of stolen data, and that all breach information it collects comes from publicly accessible dark web sources and threat intelligence platforms.
For organizations across Asia, the lesson is a familiar one. Early detection and proactive defense remain the most reliable tools against ransomware crews that scout for weak points long before they strike. What to watch next is whether i2i-systems issues a public response, and whether the stolen source code surfaces online.
Until then, the claim stands as reported — a dark web assertion, monitored and logged, with the company’s own account still awaited.
