Victim website:

gov.br

Victim country:

Brazil

Attacker name:

Black Suit

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

495 GB

Exfiltrated data type:

Miscellaneous data

Leaked data:

File tree

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

rcpsg.ac.uk

Victim country:

United Kingdom

Attacker name:

Akira

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

800 GB

Exfiltrated data type:

N/A

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

kvcconstructors.com

Victim country:

USA

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

179 GB

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

southlandintegrated.org

Victim country:

USA

Attacker name:

Akira

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

40 GB

Exfiltrated data type:

Sensitive data, including medical records, confidential documents, and passports

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

awginc.com

Victim country:

USA

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Private and personal confidential information such as client documents, contracts, social security numbers, passports, payroll, tax, and finance information

Leaked data:

/

Ransom deadline:

22^nd Oct 23

Cyber Risk Factor:

4

Victim website:

protectorfire.com.au

Victim country:

Australia

Attacker name:

Akira

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

int-bio.com

Victim country:

USA

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

2.5 TB

Exfiltrated data type:

SQL databases, clients’ data, finance data, HR data, and technical data

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

usclaimssolutions.com

Victim country:

USA

Attacker name:

Knight

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

600 GB

Exfiltrated data type:

Sensitive data. The group’s dark web portal also mentions two other companies, Mankin Custom Motors, LLC and FF&O (a subsidiary of The FF&O Group), as potential victims.

Leaked data:

/

Ransom deadline:

31^st Oct 23

Cyber Risk Factor:

5

Victim website:

thecsi.com

Victim country:

Canada

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

873 GB

Exfiltrated data type:

Miscellaneous including balance documents, backups, customers’ detail

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

03^rd Nov 23

Cyber Risk Factor:

5

Victim website:

quadranet.com

Victim country:

USA

Attacker name:

Akira

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

640 GB

Exfiltrated data type:

Passports, ssns, etc.

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

dowgolub.com

Victim country:

USA

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

1.4 TB

Exfiltrated data type:

Financial data, employees’ data, clients’ confidential data, incidents, and internal email correspondence

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

griffing.com

Victim country:

USA

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

842 GB

Exfiltrated data type:

Finance data, Employees’ data, Clients’ and customers’ confidential data

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

jebsen.com

Victim country:

China

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

2.5 TB

Exfiltrated data type:

SQL databases, clients’ data, finance data, HR data, and technical data

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

iaf.org.il

Victim country:

Israel

Attacker name:

Soldiers of Solomon

Attacker class:

InformationWarfare

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

25 TB

Exfiltrated data type:

threat actor claims to have compromised 50 servers, security cameras, and smart city management systems of the Nevatim Military area

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

cadreservices.com

Victim country:

USA

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

100 GB

Exfiltrated data type:

Job seekers data (contacts, CVs, IDs, drug screens, etc), employees data (contracts, SSN, IDs, drug screens, contacts, payments, etc), top management data (contracts, SSN, IDs, drug screens, contacts, payments, etc), financial data (payments, transfers, etc), ADB Ultrastaff data (all personal files used within this software), Smartsearch data (all I-9 records which could be found within this software files), collection of pornography we have found at CFO Vincent Salvia PC which were hidden within HR files

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

trustvip.com

Victim country:

USA

Attacker name:

Akira

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

80 GB

Exfiltrated data type:

Passports, ssns, dls and other id and personal employee information, accounting documents, contracts and confidential files

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

innovattel.com

Victim country:

USA

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

159 MB

Exfiltrated data type:

SQL Databases

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

smart-union.org

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

31^st Oct 23

Cyber Risk Factor:

3

Victim website:

frs-fnrs.be

Victim country:

Belgium

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

05^th Nov 23

Cyber Risk Factor:

3

Victim website:

salaw.com

Victim country:

United Kingdom

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

05^th Nov 23

Cyber Risk Factor:

3

Victim website:

hgmonline.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

nirolaw.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

27^th Oct 23

Cyber Risk Factor:

3

Victim website:

inventumost.inventumkjeden.no

Victim country:

Norway

Attacker name:

Akira

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

20 GB

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

siix.co.jp

Victim country:

Japan

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

1 TB

Exfiltrated data type:

Miscellaneous including financial documents and confidential data, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

rlcllc.com

Victim country:

USA

Attacker name:

0mega

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

1.54 TB

Exfiltrated data type:

N/A

Leaked data:

160 GB as a sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

piemmeonline.it

Victim country:

Italy

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including PII documents

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

intred.it

Victim country:

Italy

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including PII documents

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

kbs-accountants.nl

Victim country:

Netherlands

Attacker name:

NoEscape

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

45 GB

Exfiltrated data type:

Legal docs, legal documents, correspondence, lists and personal data of both clients and employees, the entire map of network computers has been copied, budget, finance from 1998 to 2023, banking, accounting, taxes, hundreds of passports, ID cards and driver licenses for both clients and employees, payments, invoices, audits, reports, insurance, and hundreds of thousands of other confidential and sensitive data of the company

Leaked data:

/

Ransom deadline:

25^th Oct 23

Cyber Risk Factor:

4