Victim website:

simtaspa.com

Victim country:

Italy

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 100,000

Exfiltrated data amount:

2,05 TB

Exfiltrated data type:

Details about the capital companies, credit documents, tax, HR, legal, customer data, PII documents, and much more.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

22^nd Oct 23

Cyber Risk Factor:

5

Victim website:

seattlehousing.org

Victim country:

USA

Attacker name:

NoEscape

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

158 GB

Exfiltrated data type:

Confidential Privacy Act Data, confidential agreements and contracts, NDA, passports, ID cards, driver’s licenses, SSN Cards, audit, accounting, development project, HR, account payable, client data and data of more than 150 PCs of employees were completely stolen, tens of thousands of scanned documents, insurance, letters, certificates, backups, analytics, reports, invoices, banking, taxes, finance, budget, and hundreds of thousands of other confidential and private data

Leaked data:

/

Ransom deadline:

22^nd Oct 23

Cyber Risk Factor:

5

Victim website:

alconex.com

Victim country:

USA

Attacker name:

Trigona

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 300,000

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including financial documents ant invoices

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

hospitalitaliano.org.ar

Victim country:

Argentina

Attacker name:

Knight

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous internal documents, etc.

Leaked data:

Sample with proof of the access to the hospital systems

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

morrisonhospital.com

Victim country:

USA

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

5 TB

Exfiltrated data type:

Patients and employee’s information, backups, PII documents, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

evasion.es

Victim country:

Spain

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 100,000

Exfiltrated data amount:

98 GB

Exfiltrated data type:

Miscellaneous including administrative documents, backups, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

21^st Oct 23

Cyber Risk Factor:

4

Victim website:

neodatagroup.com

Victim country:

Spain

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 100,000

Exfiltrated data amount:

133 GB

Exfiltrated data type:

Miscellaneous documents including customers’ detail, technical documents, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

20^th Oct 23

Cyber Risk Factor:

4

Victim website:

triway.riellosistemi.it

Victim country:

Canada

Attacker name:

Money Message

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including accounting, backups, HR, technical designs, contracts, financial data,

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

vicon-security.com

Victim country:

USA

Attacker name:

INC Ransom

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

50 GB

Exfiltrated data type:

Miscellaneous documents

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

bz-a.fr

Victim country:

France

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 100,000

Exfiltrated data amount:

N/A

Exfiltrated data type:

Financial documents, invoices, agreements, contracts, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

fpz.de

Victim country:

Germany

Attacker name:

Trigona

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 50,000

Exfiltrated data amount:

84 GB

Exfiltrated data type:

Miscellaneous documents including financial data, letters, invoices, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

03^rd Nov 23

Cyber Risk Factor:

4

Victim website:

akbasoglu.com

Victim country:

Turkey

Attacker name:

Knight

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Financial documents, logistics data, personal data, insurances, confidential information

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

16^th Oct 23

Cyber Risk Factor:

4

Victim website:

multidev.com

Victim country:

Canada

Attacker name:

Black Suit

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

18^th Oct 23

Cyber Risk Factor:

3

Victim website:

ldlcasvel.com

Victim country:

France

Attacker name:

NoEscape

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

32 GB

Exfiltrated data type:

Players’ personal data, passports and ID cards, finance, taxes, insurance, budget, banking, legal documents, reports, confidential letters, contracts for searching for players as well as confidential agreements and contracts, NDA, client documents and letters, as well as tens of thousands of other confidential and important documents stolen from your servers and PCs

Leaked data:

/

Ransom deadline:

22^nd Oct 23

Cyber Risk Factor:

5

Victim website:

midamericagrp.com

Victim country:

USA

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

561 GB

Exfiltrated data type:

Miscellaneous including administrative and financial documents, NDAs, SSNs, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

eicon.com.br

Victim country:

Brazil

Attacker name:

Ragnar Locker

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

181 GB

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

instantaccess-co.com

Victim country:

UAE

Attacker name:

NoEscape

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

212 GB

Exfiltrated data type:

Client data, thousands of passports, ID Card, Death Certificate, confidential and personal data of hundreds of employees, audit of financial statements, payment of salaries, taxes, reports, letters, legal docs, documents from the Ministry of Justice, licenses, certificates, confidential agreements and contracts, backup data, databases, insurance, and hundreds of thousands of other confidential and sensitive data of both the company and employees and clients

Leaked data:

/

Ransom deadline:

22^nd Oct 23

Cyber Risk Factor:

4

Victim website:

scotbeef.com

Victim country:

United Kingdom

Attacker name:

Ragnar Locker

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

82.3

Exfiltrated data type:

Miscellaneous including commercial documents, projects and development data, etc.

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

fcba.fr

Victim country:

France

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

PII documents, insurance, financial data, invoices, sensitive documents, certificates, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

villagebuilding.com.au

Victim country:

Australia

Attacker name:

INC Ransom

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Financial data, PII documents, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

comtekadvanced.com

Victim country:

Canada

Attacker name:

8Base

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Invoice, receipts, accounting documents, personal data, certificates, employment contracts, a huge amount of confidential information, confidentiality agreements, personal files

Leaked data:

/

Ransom deadline:

17^th Oct 23

Cyber Risk Factor:

4

Victim website:

ktua.com

Victim country:

USA

Attacker name:

8Base

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Invoice, receipts, accounting documents, personal data, certificates, employment contracts, a huge amount of confidential information, confidentiality agreements, personal files

Leaked data:

/

Ransom deadline:

17^th Oct 23

Cyber Risk Factor:

3

Victim website:

pelindo.co.id

Victim country:

Indonesia

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

200 GB

Exfiltrated data type:

Databases, Source code API, internal technical documentation, mobile employee self-service, travel management, etc.

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

aircanada.ca

Victim country:

Canada

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

210 GB

Exfiltrated data type:

Technical and operational data from 2008 through 2023, information on technical and security issues of the company, SQL backups, employee personal data, information on vendors and suppliers, confidential documents, archives from company databases

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

instron.com

Victim country:

USA

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

2.5 TB

Exfiltrated data type:

Blueprints and drawings, electric datasheet, PCB datasheet and drawings, firmware source codes for Hardware, datasheet of microcontrollers

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

foremostgroups.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Legal data, budgets, forecasts, bank, finance data, salaries, insurances, passports, confidential agreements with customers, audit private info, all human resources data, all consolidation reports etc.

Leaked data:

/

Ransom deadline:

11^th Oct 23

Cyber Risk Factor:

4

Victim website:

laalliance.org

Victim country:

USA

Attacker name:

Snatch

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous documents

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

metrostlouis.org

Victim country:

USA

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Private and personal confidential data, clients documents, contracts, SSN, IDs, passports, payroll, tax, finance information and etc

Leaked data:

/

Ransom deadline:

12^th Oct 23

Cyber Risk Factor:

4

Victim website:

effigest.fr

Victim country:

France

Attacker name:

NoEscape

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

46 GB

Exfiltrated data type:

N/A

Leaked data:

Sample of 16 GB as proof of the exfiltrated data

Ransom deadline:

15^th Oct 23

Cyber Risk Factor:

4

Victim website:

sobieskiinc.com

Victim country:

USA

Attacker name:

INC Ransom

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Customer and employee data, agreements, technical designs, certificates, non-disclosure agreements, invoices, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

catarineaucpa.com

Victim country:

USA

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Clients’ data, PII documents, employees’ information, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

N/A

Victim country:

Italy

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous documents including PII documents, medical data, legal documents, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

edwardian.com

Victim country:

United Kingdom

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

PII documents, invoices, financial data, incident reports, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

hugohaeffner.com

Victim country:

Germany

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including personal documents

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

stantonwilliams.com

Victim country:

United Kingdom

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

PII documents, financial data, employees’ detail, confidential documents, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4