Victim website:

gdi.com

Victim country:

Canada

Attacker name:

Cactus

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

700 GB

Exfiltrated data type:

Passports, confidential documents, etc.

Leaked data:

Sample

Ransom deadline:

N/A

Cyber Risk Factor:

5

Image:

Victim website:

bachoco.com.mx

Victim country:

Mexico

Attacker name:

Cactus

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

130 GB

Exfiltrated data type:

ID cards, confidential documents, employees’ data, etc.

Leaked data:

Sample

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Victim website:

pbssystems.com

Victim country:

Canada

Attacker name:

Cactus

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

202 GB

Exfiltrated data type:

Passports, ID cards, etc.

Leaked data:

Sample

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Victim website:

wesgar.com

Victim country:

Canada

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

1.4 TB

Exfiltrated data type:

Confidential and sensitive data

Leaked data:

Sample

Ransom deadline:

N/A

Cyber Risk Factor:

5

Image:

Victim website:

northland-mn.com

Victim country:

USA

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

1.4 TB

Exfiltrated data type:

Accounting, budget, financial data, contracts, emails, messages, projects, personal information, and technical data

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

5

Image:

Victim website:

americanalarm.com

Victim country:

USA

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

504 GB

Exfiltrated data type:

Accounting, passports,  financial, human resources, 401(k), etc.

Leaked data:

Fully published

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Victim website:

nejinc.com

Victim country:

USA

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

420 GB

Exfiltrated data type:

Confidential and sensitive information

Leaked data:

/

Ransom deadline:

5^th Jan 24

Cyber Risk Factor:

4

Image:

Victim website:

tridon.com.au

Victim country:

Australia

Attacker name:

Cactus

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

175 GB

Exfiltrated data type:

Passports, confidential documents, financial data, etc.

Leaked data:

Sample

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Victim website:

coop.se

Victim country:

Sweden

Attacker name:

Cactus

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

257 GB

Exfiltrated data type:

ID cards, passports, financial data, etc.

Leaked data:

Sample

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Victim website:

bellgroup.co.uk

Victim country:

United Kingdom

Attacker name:

Cactus

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

9 GB

Exfiltrated data type:

ID cards, passports, financial data, confidential documents, etc.

Leaked data:

Sample

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Victim website:

richmondwindsortaxis.com.au

Victim country:

Australia

Attacker name:

PALU ANON CYBER

Attacker class:

Hacktivism

Attack technique:

Data breach

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Driver’s personal data and account, admin username and password.

Leaked data:

Fully published

Ransom deadline:

N/A

Cyber Risk Factor:

3

Image:

Victim website:

ohiolottery.com

Victim country:

USA

Attacker name:

DragonForce

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

600 GB

Exfiltrated data type:

More than 3,000,000 entries, first name, last name, mail, addresses, winning amounts, SSNs, records of employees and players.

Leaked data:

Sample

Ransom deadline:

1^st Jan 24

Cyber Risk Factor:

5

Image:

Victim website:

webblaw.com

Victim country:

USA

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

578 GB

Exfiltrated data type:

Users’ data, corporate data, scans, mails.

Leaked data:

Fully published

Ransom deadline:

N/A

Cyber Risk Factor:

5

Image:

Victim website:

marinetraffic.com

Victim country:

Greece

Attacker name:

APTlord

Attacker class:

Cybercrime

Attack technique:

Data breach

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Source code

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

5

Image:

Victim website:

coastalplainsctr.org

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

10^th Jan 24

Cyber Risk Factor:

4

Image:

Victim website:

hoffmanestates.org

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

12^th Jan 23

Cyber Risk Factor:

4

Image:

Victim website:

pinterest.com

Victim country:

USA

Attacker name:

Anonymous Sudan

Attacker class:

Hacktivism

Attack technique:

DDoS

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

3

Image:

Victim website:

cvrassociates.com

Victim country:

USA

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Private and personal confidential data, clients documents, budget, IDs, payroll, taxes, finance information and etc.

Leaked data:

/

Ransom deadline:

29^th Dec 23

Cyber Risk Factor:

4

Image:

Victim website:

qatarairways.com

Victim country:

Qatar

Attacker name:

R00TK1T

Attacker class:

Cybercrime

Attack technique:

Data breach

Ransom demand:

N/A

Exfiltrated data amount:

1.8 GB

Exfiltrated data type:

ADOC N@vigator software for controlling Airbus 350 belonging to Qatar Airways

Leaked data:

Sample

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Victim website:

sanofi.com

Victim country:

France

Attacker name:

R00TK1T

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Database

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

5

Image:

Victim website:

tecnoquadri-srl.it

Victim country:

Italy

Attacker name:

UserSec

Attacker class:

Hacktivism

Attack technique:

Data breach

Ransom demand:

N/A

Exfiltrated data amount:

33 million lines of Italian data

Exfiltrated data type:

N/A

Leaked data:

Sample

Ransom deadline:

N/A

Cyber Risk Factor:

5

Image:

Victim website:

flash-motors.stream

Victim country:

Cyprus

Attacker name:

Ransomed

Attacker class:

Cybercrime

Attack technique:

Data breach

Ransom demand:

$ 150,000

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

3

Image:

Victim website:

smbw.com.au

Victim country:

Australia

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

9^th Jan 24

Cyber Risk Factor:

3

Image:

Victim website:

coaxis.com

Victim country:

France

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

9^th Jan 24

Cyber Risk Factor:

4

Image:

Victim website:

richmont.edu

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

37 GB

Exfiltrated data type:

Certificates, attendance sheets, staff details, financial reports, budgets, and student details

Leaked data:

Sample

Ransom deadline:

02^nd Jan 23

Cyber Risk Factor:

4

Image:

Victim website:

maytronics.com

Victim country:

Cyber Toufan

Attacker name:

Israel

Attacker class:

Hactivism

Attack technique:

Data breach

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Customers and distributors details

Leaked data:

Sample

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Victim website:

ecom.gov.il

Victim country:

Israel

Attacker name:

Cyber Toufan

Attacker class:

Hacktivism

Attack technique:

Data breach

Ransom demand:

N/A

Exfiltrated data amount:

5.5 GB

Exfiltrated data type:

Whole disk image of one of the backend servers of Israel’s State Payment Gateway

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

Image:

Victim website:

first5kids.org

Victim country:

USA

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

154 GB

Exfiltrated data type:

Confidential and sensitive information

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Victim website:

aura-engineering.com

Victim country:

USA

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

232 GB

Exfiltrated data type:

Confidential and sensitive information

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Victim website:

ultra-ic.com

Victim country:

USA

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

30 GB

Exfiltrated data type:

Audit data, financial data, Costpoint, project data, employee data, contracts related data. Moreover, the group published a list of companies and organizations could be found within stolen data: Prologic, Inc., NEC, FBI, DEA, NATO, AT&T, CIS, CIS Poland, CIS Belgium, CIS Bulgaria, Switzerland, Glotech Taiwan, Royal Saudi Naval Force, ABM Building Services, Jama Software, Inc, GET Engineering Corp., Randstad RiseSmart, SeaCorp, C2I UK, Aeronautics – Israel, Aerotek Government Services, NGLD Base, Swiss government, other companies related to military and intelligence federal worldwide services.

Leaked data:

Sample

Ransom deadline:

N/A

Cyber Risk Factor:

5

Image:

Victim website:

eps.rs

Victim country:

Serbia

Attacker name:

Qilin

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Private agreements, contracts with partners inside and outside the country, financial documents, loan agreements, reports, balance sheets, a huge number of private email correspondence, etc.

Leaked data:

Sample

Ransom deadline:

N/A

Cyber Risk Factor:

5

Image:

Victim website:

co.lake-of-the-woods.mn.us

Victim country:

USA

Attacker name:

Meow

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image: