The medusalocker ransomware group listed Kde on its data leak site on 2026-11-04. Sector: Technology Domains named: icn.ma Claim as published on the leak site: Moroccan industrial/automotive company (icn.ma) with a full in-house accounting office: general-ledger and cash-desk files, client balances, bank transfer orders (BMCE), purchase orders, staff lists, and trade documents including an overseas distribution agreement and proforma invoices for FAS Automotive (encap_maroc).