The CoinbaseCartel group has listed OTEIS Conseil
& Ingénierie as a victim since August 22, 2026. No volume, no file, no data
published to date. This case file documents what that listing really lets you
conclude — and what it doesn't.
⚠️ The most uncertain of our recent case
files. This isn't a leak in the usual sense: it's a company appearing on an
extortion site, with no evidence made public. We document it precisely because it
illustrates the difference between a claim and a confirmed leak — the founding
principle of this Laboratory.
What's verifiable, and what isn't
Aug 22
Date OTEIS appears on CoinbaseCartel's site, status "active."
Ransomware.live.
0
File, sample, or data volume published by CoinbaseCartel to
date.
FrenchBreaches: "No disclosed information available yet."
?
Intrusion mechanism: no vector disclosed, no independent
confirmation.
FrenchBreaches.
160+
Victims claimed by CoinbaseCartel worldwide since September
2025, across all sectors.
Halcyon, group profile.
Timeline
CLAIMED
August 22, 2026
OTEIS Conseil & Ingénierie, a French engineering firm
specializing in building and infrastructure (structures, fluids, electricity),
appears on CoinbaseCartel's disclosure site. No data, no file accompanies the
listing.
UNVERIFIABLE
At time of writing
Neither the data volume, nor the number of people affected,
nor the intrusion mechanism is disclosed. No independent confirmation from the
company has been found.
🎯Why a listing isn't proof
CoinbaseCartel is an "encryption-free" extortion group: it steals data via
compromised credentials, then pressures for payment by threatening to publish.
Listing a company ahead of any data publication is part of that method — pressure,
not proof. A name on such a list alone doesn't confirm the actual intrusion, its
scale, or the nature of the data involved.
What it changes for you
If you're a client, partner, or employee of OTEIS, there's no concrete data to
check yet — only a claim to watch. This case file will be updated if CoinbaseCartel
publishes evidence, or if OTEIS makes a statement.
🔒 Facing this kind of unproven claim, the right reflex is
to wait for confirmation before acting out of panic — while staying alert to
unusual communications citing this company.
Frequently asked questions
Was OTEIS hacked?
That's not what the available facts show: no data has been published to
date.
Why would a company appear without proof?
Some extortion groups publish a victim list ahead of time, as a pressure tactic
before any real disclosure.
What is CoinbaseCartel?
A data-extortion group active since September 2025, with no connection to the
company Coinbase.
📌 Last checked: August 24, 2026.
Verifiable information to report: contact@egidio.app.
Cite this pageEgidio — The Threat Laboratory, "OTEIS: a group's claim, no data published," egidio.app/en/laboratoire/oteis-unverified-ransomware-claim/. Licensed CC BY 4.0.
Free to reuse, including commercially, with attribution. Reuse terms.