Victim website:

asl1abruzzo.it

Victim country:

Italy

Attacker name:

Monti

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

522 GB (Multiple vulnerabilities allowed the download of data)

Exfiltrated data type:

Data on HIV-positive patients

Leaked data:

Sample with proof of the exfiltrated data.

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

ziegler.de

Victim country:

Germany

Attacker name:

BlackCat/ALPHV

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

Large amount of data (Multiple vulnerabilities has been exploited)

Exfiltrated data type:

Engineering information, confidential customer and partner data, correspondence with military organizations etc.

Leaked data:

Sample with proof of the exfiltrated data. (Personal and financial information of customers and partners is sold on the black market)

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

bluefield.edu

Victim country:

USA

Attacker name:

AvosLocker

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

1,2 TB

Exfiltrated data type:

Miscellaneous documents including, photos, employees and students’ information

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

southernwv.edu

Victim country:

USA

Attacker name:

Royal

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

14,5 GB

Exfiltrated data type:

Personal information of students and personnel (hundreds of SSNs, medical information and etc.), confidential documents, NDAs and many other.

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

lux-automation.com

Victim country:

Germany

Attacker name:

Monti

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

366 GB

Exfiltrated data type:

Company data

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

bch.co.ao

Victim country:

Angola

Attacker name:

BlackCat/ALPHV

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

Large amount of data

Exfiltrated data type:

Swift data, Financial info about partners and customers, Credit card data, Personal customer information, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

07^th May 23

Cyber Risk Factor:

4

Victim website:

saxon.ch

Victim country:

Switzerland

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Students personal information, private information, financial documents

Leaked data:

/

Ransom deadline:

11^th May 23

Cyber Risk Factor:

4

Victim website:

lowellma.gov

Victim country:

USA

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Private and personal confidential data, passports, IDs, finance, payroll, departments documents, budget and etc

Leaked data:

/

Ransom deadline:

11^th May 23

Cyber Risk Factor:

4

Victim website:

midwesttruck.com

Victim country:

USA

Attacker name:

Royal

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Corporate data with all the personal (drivers licenses, addresses, phones, passports, SSNs) and business (financial docs, bank statements, incident, contract) information

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

sydneywestcancer.org

Victim country:

Australia

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 100,000

Exfiltrated data amount:

Large amount of data

Exfiltrated data type:

Miscellaneous documents

Leaked data:

Sample with proof of the exfiltrated documents

Ransom deadline:

12^th May 23

Cyber Risk Factor:

4

Victim website:

idtechproducts.com

Victim country:

USA

Attacker name:

Cl0p

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including employees information, technical documents, correspondence etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

gihealthcare.com

Victim country:

USA

Attacker name:

Cuba

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Large amount of data

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

forestridge.com

Victim country:

USA

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

carrington.ca

Victim country:

United Kingdom

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

zbw.eu

Victim country:

Germany

Attacker name:

Royal

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Employees and customers, contracts, NDAs and even Ukraine conflict predictions and reviews.

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

triaflex.at

Victim country:

Austria

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

Large amount of data

Exfiltrated data type:

Miscellaneous including financial documents

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

17^th May 23

Cyber Risk Factor:

3

Victim website:

negma.net

Victim country:

USA

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Private and personal confidential data, finance, taxes, passports, employee and clients documents

Leaked data:

/

Ransom deadline:

11^th May 23

Cyber Risk Factor:

3

Victim website:

vocalcom.com

Victim country:

France

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Private and personal confidential data, finance, passports, clients data, technical information and etc.

Leaked data:

/

Ransom deadline:

11^th May 23

Cyber Risk Factor:

3

Victim website:

woonkracht10.nl

Victim country:

Netherlands

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Private and personal confidential data, finance, passports, contracts, HR and etc

Leaked data:

/

Ransom deadline:

06^th May 23

Cyber Risk Factor:

3

Victim website:

groppernejat.com

Victim country:

USA

Attacker name:

Qilin

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

12,21

Exfiltrated data type:

Miscellaneous documents

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

coremain.com

Victim country:

Spain

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Private and personal confidential data, employee and client information

Leaked data:

/

Ransom deadline:

11^th May 23

Cyber Risk Factor:

3

Victim website:

novagroup.com.au

Victim country:

Australia

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Private and personal confidential data, passports, employee information, technical documentation

Leaked data:

/

Ransom deadline:

11^th May 23

Cyber Risk Factor:

3

Victim website:

dgc.se

Victim country:

Sweden

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Private and personal confidential data, finance, taxes, clients and employee information

Leaked data:

/

Ransom deadline:

11^th May 23

Cyber Risk Factor:

3

Victim website:

libravirtua.hu

Victim country:

Hungary

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Private and personal confidential data, finance, hr, contracts, databases, clients documents and files

Leaked data:

/

Ransom deadline:

11^th May 23

Cyber Risk Factor:

3

Victim website:

trelleborg.com

Victim country:

USA

Attacker name:

BlackCat/ALPHV

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

200 GB

Exfiltrated data type:

Miscellaneous documents. (BitDefender antivirus was disabled, the company’s infrastructure was completely compromised. Two Daily NAS, local backup storage, and three ESXI servers are encrypted.)

Leaked data:

1. Partial listing of files 1 used in communication 2. Listing half of the files downloaded from the company 3. Random samples of files in the form of an archive 3. Internal documents of the company, including Trelleborg 4. Contact details of employees 5. Company passwords 6. Excerpt from communication with the company in the chat.

Ransom deadline:

04^th May 23

Cyber Risk Factor:

5

Victim website:

altocalore.it

Victim country:

Italy

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 100,000

Exfiltrated data amount:

Terabytes of data

Exfiltrated data type:

Miscellaneous including contracts, projects backups etc.

Leaked data:

Sample with file tree as a proof of the exfiltrated data

Ransom deadline:

10^th May 23

Cyber Risk Factor:

5

Victim website:

polatyol.com

Victim country:

Turkey

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 900,000

Exfiltrated data amount:

Large amount of data

Exfiltrated data type:

Miscellaneous including PII documents

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

10^th May 23

Cyber Risk Factor:

5

Victim website:

montana.edu

Victim country:

USA

Attacker name:

Royal

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

105 GB

Exfiltrated data type:

Personal data, numerous financial and administrative documents, students’ personal and medical information

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

brightonhill.hants.sch.uk

Victim country:

United Kingdom

Attacker name:

Vice Society

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

Large amount of data

Exfiltrated data type:

Miscellaneous documents including HR, Insurance, credit cards etc.

Leaked data:

Sample with several downloadable folders as a proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

ambit.co

Victim country:

India

Attacker name:

BlackCat/ALPHV

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

500 GB

Exfiltrated data type:

Company data including scans of Aadhar card, application forms, account statements, email, etc

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

edisonlearning.com

Victim country:

USA

Attacker name:

Royal

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

20 GB

Exfiltrated data type:

Organization data including personal information of employees and students

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

tclarkconsulting.com

Victim country:

USA

Attacker name:

BlackCat/ALPHV

Attacker class:

Cybercrime

Attack technique:

Data breach

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Confidential data of the company and its customers

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

gfcmsu.edu

Victim country:

USA

Attacker name:

Royal

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Internal information of this college is interested as a detailed description of inner operations

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

3