Victim website:

moneymax.com

Victim country:

USA

Attacker name:

KaraKurt

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

4 TB

Exfiltrated data type:

2,861,839 SSNs in total, database with 3 million lines, which contains information about the status of the loan, addresses, last names, phone numbers, mails, and even the characteristics of the debtor, finance, clients data, accounting data, legal data, CRM backups, fully dumped VIP users mailboxes and more.

Leaked data:

/

Ransom deadline:

10^th Apr

Cyber Risk Factor:

5

Victim website:

rimex.com

Victim country:

Canada

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

1 TB

Exfiltrated data type:

Hr, audit, accounting, business documents, financial data, technical documents, engeenering data, top managment mail archives, personal data.

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

skywayendo.com

Victim country:

USA

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

540 GB

Exfiltrated data type:

Accounting, marketing data, financial data, medical data, client personal data, QuickBooks databases

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

victoriapark.se

Victim country:

Sweden

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

350 GB

Exfiltrated data type:

Accounting, projects, SQL databases, Client personal data

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

wymondhamcollege.org

Victim country:

United Kingdom

Attacker name:

Royal

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

492 GB

Exfiltrated data type:

students’ passports, medical vaccination info, children behavior notifications for parents, nonpayment notifications, confidential protocols and much more

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

savannahtech.edu

Victim country:

USA

Attacker name:

Royal

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

100 GB

Exfiltrated data type:

Personal data of their employees, financial documents, auto park information, insurance, passports, and even a note from sheriff.

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

ultra-met.com

Victim country:

USA

Attacker name:

Royal

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

128 GB

Exfiltrated data type:

credit card information, passports, stocks, employee information (including salaries), financial balance and the info of defects while manufacturing.

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

avindustriesinc.com

Victim country:

USA

Attacker name:

RansomHouse

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

25 GB

Exfiltrated data type:

Miscellaneous, confidential data, projects documents

Leaked data:

Sample with downloadable evidence pack

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

bmw.fr

Victim country:

France

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Private and personal confidential data, clients documents, contracts, finance information and etc.

Leaked data:

/

Ransom deadline:

09^th Apr 23

Cyber Risk Factor:

3

Victim website:

oscar.fi

Victim country:

Finland

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Private and personal confidential data, employees’ documents, technical information, contracts, finance information.

Leaked data:

/

Ransom deadline:

09^th Apr 23

Cyber Risk Factor:

3

Victim website:

jablite.co.uk

Victim country:

United Kingdom

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Private and personal confidential data, employees documents, IDs, taxes, contracts, finance information.

Leaked data:

/

Ransom deadline:

09^th Apr 23

Cyber Risk Factor:

3

Victim website:

pccarx.com

Victim country:

USA

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

identity card, passports, drivers license, sales contracts, etc.

Leaked data:

Proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

helmholtz.de

Victim country:

Germany

Attacker name:

Royal

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Employees information from HR, projects information (science, medical), financial information along with the confidential files.

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

grupcovesa.com

Victim country:

Spain

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

2

Victim website:

mersgooldwill.com

Victim country:

USA

Attacker name:

Royal

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

2

Victim website:

tanbridge-house-sch.co.uk

Victim country:

United Kingdom

Attacker name:

RansomHouse

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

294 GB

Exfiltrated data type:

Confidential data, projects documents

Leaked data:

Downloadable evidence pack

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

tecnosysitalia.eu

Victim country:

Italy

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous, financial, credentials, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

06^th Apr 23

Cyber Risk Factor:

4

Victim website:

swiftatlanta.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Company data, invoices, drawings, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

04^th Apr 23

Cyber Risk Factor:

4

Victim website:

furuno.es

Victim country:

Spain

Attacker name:

Stormous

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous documents

Leaked data:

10% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

irco.com

Victim country:

USA

Attacker name:

Stormous

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous documents

Leaked data:

3% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

arrowall.com

Victim country:

USA

Attacker name:

Stormous

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous documents

Leaked data:

14% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

oksgroup.com

Victim country:

USA

Attacker name:

Stormous

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous documents

Leaked data:

14% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

modestogov.com

Victim country:

USA

Attacker name:

Snatch

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

all4labels.com

Victim country:

Germany

Attacker name:

BlackCat/ALPHV

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous, financial, technical designs, invoices

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

dukane.com

Victim country:

USA

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous, PII documents etc.

Leaked data:

Proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

islandinsurance.ca

Victim country:

Canada

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

16^th Apr 23

Cyber Risk Factor:

2

Victim website:

lqtbg.com.cn

Victim country:

China

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

30^th Mar 23

Cyber Risk Factor:

2

Victim website:

linx.com.br

Victim country:

Brazil

Attacker name:

Stormous

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

30^th Mar 23

Cyber Risk Factor:

2

Victim website:

piramal.com

Victim country:

India

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

31^st Mar 23

Cyber Risk Factor:

2