Victim website:

hwlebsworth.com.au

Victim country:

Australia

Attacker name:

BlackCat/ALPHV

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

4 TB

Exfiltrated data type:

Internal Company Data (Employees personal data, CV’s, DL’s, ID’s, SSN’s, Financial reports, Accounting data, Loans data, Insurance, Agreements and much more); – Clients documentation (DL’s, ID’s, SSN’s, Financial data, Credit cards information, Loans data, Agreements and much more); – Complete network map including credentials for local and remote services etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

laredhealthcenter.org

Victim country:

USA

Attacker name:

KaraKurt

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

79 GB

Exfiltrated data type:

Financial documents, medical records with diagnosis, their employee and students personal information.

Leaked data:

/

Ransom deadline:

02^nd May 23

Cyber Risk Factor:

4

Victim website:

gc-employment.com

Victim country:

Canada

Attacker name:

Cl0p

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

Large amount of data

Exfiltrated data type:

Miscellaneous including social security numbers, client’s information and PII documents

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

cavalierhospital.com

Victim country:

USA

Attacker name:

AvosLocker

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

NDA’s, Database dump containing information about each patient and employer (previous and current) (MSSQL: Angus, Conversion_Centriq), HR, Board, Policies

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

dijones.com.au

Victim country:

Australia

Attacker name:

AvosLocker

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

125 GB

Exfiltrated data type:

Miscellaneous including Payroll, HR, Marketing, Finance

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

03^rd May 23

Cyber Risk Factor:

4

Victim website:

mastercorp.com

Victim country:

USA

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

anton-paar.com

Victim country:

Austria

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including insurance and PII documents

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

feesmith.com

Victim country:

USA

Attacker name:

Akira

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Clients’ private information

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

vmedia.ca

Victim country:

Canada

Attacker name:

AvosLocker

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

sunpowermarine.com

Victim country:

USA

Attacker name:

AvosLocker

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

laragh.com

Victim country:

South Africa

Attacker name:

AvosLocker

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

multimedica.it

Victim country:

Italy

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A (ransomware caused severe hospital outage)

Leaked data:

/

Ransom deadline:

30^th Apr 23

Cyber Risk Factor:

5

Victim website:

concursosfcc.com.br

Victim country:

Brazil

Attacker name:

BlackCat/ALPHV

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

Large amount of data

Exfiltrated data type:

Miscellaneous including confidential and PII documents

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

omt-torino.com

Victim country:

Italy

Attacker name:

RansomHouse

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

200 GB

Exfiltrated data type:

Miscellaneous including clients data, credentials, financial, confidential documents

Leaked data:

Sample with several downloadable folders as a proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

tranztec.com

Victim country:

USA

Attacker name:

RansomHouse

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

70 GB

Exfiltrated data type:

Miscellaneous including financial, contacts, customers, passwords and vendors documents

Leaked data:

Sample with several downloadable folders as a proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

coachcomm.com

Victim country:

USA

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

Large amount of data

Exfiltrated data type:

Miscellaneous including database, customers, emails, employees, HR, financial documents

Leaked data:

Sample with proof of the exfiltrated documents

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

new.alliancesportsgroup.net

Victim country:

USA

Attacker name:

Akira

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Accounting, finance, legal, insurance, HR, operations etc.

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

settlementmusic.org

Victim country:

USA

Attacker name:

Akira

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Documents of teachers, parents, employees. Financial reports and other numerous internal documents

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

spgroup.com

Victim country:

USA

Attacker name:

Akira

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Corporate and personal information of customers

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

tbcorp.com

Victim country:

Canada

Attacker name:

Akira

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Corporate data (accounting, information, business contracts and much other including personal data of their employees)

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

rockbridgecapital.com

Victim country:

USA

Attacker name:

Akira

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

40 GB

Exfiltrated data type:

Business information: numerous contracts, projects, business contacts, detailed and personal employees information, confidential documents etc.

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

familydaycare.com

Victim country:

Canada

Attacker name:

Akira

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Customers’ information

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

4leafinc.com

Victim country:

USA

Attacker name:

Akira

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Clients’ information

Leaked data:

N/A

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

pak-rite.com

Victim country:

USA

Attacker name:

Akira

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Corporate and personal information

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

silbon.es

Victim country:

Spain

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

28^th Apr 23

Cyber Risk Factor:

2

Victim website:

fsdc.org.hk

Victim country:

Hong Kong

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

28^th Apr 23

Cyber Risk Factor:

2

Victim website:

cdcbmestihl.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

28^th Apr 23

Cyber Risk Factor:

2

Victim website:

bg2i.fr

Victim country:

France

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

28^th Apr 23

Cyber Risk Factor:

2

Victim website:

e-hazard.com

Victim country:

USA

Attacker name:

BlackCat/ALPHV

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

2

Victim website:

accesscontrolsecurity.com

Victim country:

USA

Attacker name:

BlackCat/ALPHV

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

2

Victim website:

generalplug.com

Victim country:

USA

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

612 GB

Exfiltrated data type:

Projects, accounting, company data, engineering data, top managment mail archives, quickbooks databases

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

benthams.com

Victim country:

United Kingdom

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 500,000

Exfiltrated data amount:

Large amount of data

Exfiltrated data type:

Financial, technical designs, employees’ information, business plans

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

02^nd May 23

Cyber Risk Factor:

5

Victim website:

bernina.com

Victim country:

Switzerland

Attacker name:

BlackCat/ALPHV

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

200 GB

Exfiltrated data type:

Customer data, clients data, employee data, nda-contracts and documents, drawings and developments, bank data and reports, statements, personal data.

(415,000 files were seized, excluding SQL databases.

More than 30 Volumes are encrypted in Cluster Storage.

Offices in Switzerland, Thailand are affected.

The tapes are wiped, the NAS is wiped, found and successfully encrypted 7 Hyper-V.)

Leaked data:

Several samples with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

bilsteingroup.com

Victim country:

Germany

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

60 GB

Exfiltrated data type:

HR, Accounting, Financial data, Projects

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

fxtran.com

Victim country:

USA

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

360 GB

Exfiltrated data type:

HR, files from management pc’s, financial data, business data, personal data

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

etic-groupe.com

Victim country:

France

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

230 GB

Exfiltrated data type:

HR, files from management pc’s, financial data, business data

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

xpresscargoinc.com

Victim country:

USA

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

400 GB

Exfiltrated data type:

Projects, clients data, financial data, business data, accounting, SQL databases

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

imanor.gov.ma

Victim country:

Morocco

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including financial and PII documents

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

24^th May 23

Cyber Risk Factor:

4

Victim website:

atlanticeye.net

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Full database of the medical records for all patients and data exfiltrated from their file server.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

05^th May 23

Cyber Risk Factor:

4

Victim website:

akpk.org.my

Victim country:

Malaysia

Attacker name:

BlackCat/ALPHV

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

1,500,000 files

Exfiltrated data type:

Miscellaneous including financial and PII documents

Leaked data:

50% of the exfiltrated data

Ransom deadline:

28^th Apr 23

Cyber Risk Factor:

4

Victim website:

bevangroup.com

Victim country:

United Kingdom

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 100,000

Exfiltrated data amount:

Large amount of data

Exfiltrated data type:

Miscellaneous including financial, technical designs, customer information etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

04^th May 23

Cyber Risk Factor:

4

Victim website:

gtgroupinc.com

Victim country:

Canada

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous documents

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

peachtree-medical.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

Large amount of data

Exfiltrated data type:

Full database of the medical records for all patients and data exfiltrated from their file server

Leaked data:

Sample with proof of the exfiltrated documents

Ransom deadline:

05^th May 23

Cyber Risk Factor:

4

Victim website:

ptow.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

Large amount of data

Exfiltrated data type:

Full database of the medical records for all patients and data exfiltrated from their file server

Leaked data:

Sample with proof of the exfiltrated documents

Ransom deadline:

05^th May 23

Cyber Risk Factor:

4

Victim website:

vcclawservices.com

Victim country:

Hong Kong

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including financial and PII documents

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

16^th May 23

Cyber Risk Factor:

3

Victim website:

ewwanfried.de

Victim country:

Germany

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

99 GB

Exfiltrated data type:

Miscellaneous including financial documents

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

16^th May 23

Cyber Risk Factor:

3

Victim website:

summerweine.at

Victim country:

Austria

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

6 GB

Exfiltrated data type:

Miscellaneous including financial documents

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

16^th May 23

Cyber Risk Factor:

3

Victim website:

fabeckarchitectes.lu

Victim country:

Luxembourg

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

77 GB

Exfiltrated data type:

Miscellaneous including financial documents

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

16^th May 23

Cyber Risk Factor:

3

Victim website:

dacotahpaper.com

Victim country:

USA

Attacker name:

BlackByte

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including financial documents

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

ddmontaza.hr

Victim country:

Croatia

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including financial documents and technical designs

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

16^th May 23

Cyber Risk Factor:

3

Victim website:

lhh.com.my

Victim country:

Malaysia

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including financial and PII documents

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

16^th May 23

Cyber Risk Factor:

3

Victim website:

sunnydesigns.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

Large amount of data

Exfiltrated data type:

Sales database for all customers + data from their file server

Leaked data:

Sample with proof of the exfiltrated documents

Ransom deadline:

05^th May 23

Cyber Risk Factor:

3

Victim website:

keystonesmiles.org

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

15^th May 23

Cyber Risk Factor:

2

Victim website:

omahath.com

Victim country:

USA

Attacker name:

BlackCat/ALPHV

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

2