Victim website:

henryschein.com

Victim country:

USA

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

35 TB

Exfiltrated data type:

Internal payroll data and shareholder folders

Leaked data:

Sample with proof of the exfiltrated data, clients, partners, employee sensitive data

Ransom deadline:

03^rd Nov 23

Cyber Risk Factor:

5

Victim website:

shimano.com

Victim country:

Japan

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

4.5 TB

Exfiltrated data type:

Employees (ID, NRIC, IC No., TIN Number, SSS Number, mail, telephone, residential address, passport scans, contracts marked CONFIDENTIALITY)

Financial documents (balance sheets, budget, PL reports, expense reports, bank statements, accounts payable and receivable reports, various tax forms and reports, audits, cashflow, plans, KPIs and many other important financial documents)

Client database (address, phone number, responsible person), reports, presentations, analytics, internal documents, mail correspondence, results of various meetings, minutes, developments, various confidential reports, sales reports, legal documents, factory inspection results (violations), projects, various reports from production, information about machines (robots), committee results, incident report

NDA, contracts, agreements, various diagrams/drawings marked CONFIDENTIAL, development materials, laboratory tests, tests, Corrective Action Report, many sources and other important documents.

Leaked data:

/

Ransom deadline:

05^th Nov 23

Cyber Risk Factor:

5

Victim website:

lafase.cl

Victim country:

Chile

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

204 GB

Exfiltrated data type:

Miscellaneous including financial documents

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

22^nd Nov 23

Cyber Risk Factor:

4

Victim website:

bindagroup.com

Victim country:

Italy

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including financial data, customer details, invoices, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

16^th Nov “3

Cyber Risk Factor:

4

Victim website:

ricardo.com

Victim country:

United Kingdom

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Private and personal confidential data, clients documents, IDs, HR, budget, documentation on subcontracts of military companies and departments of the USA and England, developments and technical documentation, tax, finance information and etc.

Leaked data:

/

Ransom deadline:

07^th Nov 23

Cyber Risk Factor:

4

Victim website:

gspcomponents.com

Victim country:

USA

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Private and personal confidential data, client documents, HR, budget, tax, finance information and etc.

Leaked data:

/

Ransom deadline:

07^th Nov 23

Cyber Risk Factor:

4

Victim website:

graininspection.com

Victim country:

USA

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Private and personal confidential data, client documents, budget, tax, finance information and etc.

Leaked data:

/

Ransom deadline:

07^th Nov 23

Cyber Risk Factor:

4

Victim website:

hilyards.com

Victim country:

USA

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Private and personal confidential information, clients’ documents, HR information, budget details, tax information, finance information, and more.

Leaked data:

/

Ransom deadline:

07^th Nov 23

Cyber Risk Factor:

4

Victim website:

jdrm.com

Victim country:

USA

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Private and personal confidential information, clients’ documents, HR data, budget information, technical documentation, tax and finance information, and more

Leaked data:

/

Ransom deadline:

07^th Nov 23

Cyber Risk Factor:

4

Victim website:

bry-air.com

Victim country:

USA

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Private and personal confidential information, clients’ documents, IDs, HR, budget, tax, and finance information

Leaked data:

/

Ransom deadline:

04^th Nov 23

Cyber Risk Factor:

4

Victim website:

agiledisplaysolutions.com

Victim country:

Taiwan

Attacker name:

NoEscape

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

18 GB

Exfiltrated data type:

SQL Backup, Confidential documents,

Contracts and agreements,

Banking, finance, payments, transfers,

Activity reports related to company activities,

Data on suppliers, and personal data of employees, as well as thousands of other important company documents.

Leaked data:

/

Ransom deadline:

13^th Nov 23

Cyber Risk Factor:

4

Victim website:

laborforce.com

Victim country:

USA

Attacker name:

NoEscape

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

5 GB

Exfiltrated data type:

Personal data of employees, budget, insurance, leadership, audit, agreement, confidential documents, etc.

Leaked data:

/

Ransom deadline:

11^th Nov 23

Cyber Risk Factor:

4

Victim website:

microtrain.net

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

27 GB

Exfiltrated data type:

Enrollment forms, business transactions, agreements, invoices, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

22^nd Nov 23

Cyber Risk Factor:

4

Victim website:

craft-maid.com

Victim country:

USA

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Private and personal confidential information, clients’ documents, HR information, budget, tax, finance information, and more

Leaked data:

/

Ransom deadline:

07^th Nov 23

Cyber Risk Factor:

3

Victim website:

bluewaterhealth.ca

Victim country:

Canada

Attacker name:

Daixin

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

160 GB

Exfiltrated data type:

5.6 million records containing PII and PHI information, 160 GB of sensitive documents, which include scanned copies of personal and health information.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

rnwooler.co.uk

Victim country:

United Kingdom

Attacker name:

NoEscape

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

840 GB

Exfiltrated data type:

Almost a million documents of thousands of people

Leaked data:

/

Ransom deadline:

12^th Nov 23

Cyber Risk Factor:

5

Victim website:

softwaresysinc.com

Victim country:

USA

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 100,000

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including financial documents

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

09^th Nov 23

Cyber Risk Factor:

4

Victim website:

imprex.es

Victim country:

Spain

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including employees’ data, customers, marketing, financial, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

15^th Nov 23

Cyber Risk Factor:

4

Victim website:

kitprofs.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including letters, confidential documents, technical designs, employees’ data, backups, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

15^th Nov 23

Cyber Risk Factor:

4

Victim website:

raumberg-gumpenstein.at

Victim country:

Austria

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including financial data, invoices, customers’ documents, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

15^th Nov 23

Cyber Risk Factor:

4

Victim website:

steelofcarolina.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including employees’ details, backups, financial documents, accounting and insurance, certificates, technical designs, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

15^th Nov 23

Cyber Risk Factor:

4

Victim website:

vitaresearch.com

Victim country:

Italy

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Banking data, contracts, and a screenshot showing the exfiltration of administrative documents, legal papers, co-owned cards, and more.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

15^th Nov 23

Cyber Risk Factor:

4

Victim website:

degregoris.com

Victim country:

Italy

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Invoices, legal documents, login credentials for the Agenzia delle Entrate portal, customer information, banking data, and more.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

15^th Nov 23

Cyber Risk Factor:

4

Victim website:

schwob.swiss

Victim country:

Switzerland

Attacker name:

NoEscape

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

238 GB

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

07^th Nov 23

Cyber Risk Factor:

4

Victim website:

groupe-faubourg.com

Victim country:

France

Attacker name:

8Base

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Invoices, receipts, accounting documents, personal data, certificates, employment contracts, confidentiality information, personal files etc.

Leaked data:

/

Ransom deadline:

08^th Nov 23

Cyber Risk Factor:

4

Victim website:

handelsschoolaalst.be

Victim country:

Belgium

Attacker name:

Rhysida

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

114 GB

Exfiltrated data type:

N/A

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

imancorp.es

Victim country:

Spain

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous documents including passports

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

afsupply.com

Victim country:

USA

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Financial, insurance, medical, court, and other documents.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

hal-allergy.com

Victim country:

Netherlands

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

62.4 MB

Exfiltrated data type:

Invoices and EU Plans

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

cottrelldental.com

Victim country:

US

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

hacap.org

Victim country:

USA

Attacker name:

Black Suit

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

sanmiguel.com.ph

Victim country:

Philippines

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

N/A

Ransom deadline:

15^th Nov 23

Cyber Risk Factor:

3

Victim website:

dso.org

Victim country:

USA

Attacker name:

Snatch

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

psmicorp.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

22^nd Nov 23

Cyber Risk Factor:

3

Victim website:

auswideservices.net

Victim country:

Australia

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

2.5 TB

Exfiltrated data type:

Personal information, accounting and financial data, contract information, files from the CFO’s computer, operational and business files, as well as email and message archives, belonging to Auswide Services and other Australian companies

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

smartuigroup.com.au

Victim country:

Australia

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including invoices and financial documents, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

20^th Nov 23

Cyber Risk Factor:

4

Victim website:

prasan.net

Victim country:

USA

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

687 GB

Exfiltrated data type:

Personal data, accounting information, financial data, contract data, files from the CFO’s PC, operational and business files, and clients’ personal information

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

ageroute.sn

Victim country:

Senegal

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

121 GB

Exfiltrated data type:

Miscellaneous including financial, invoices and PII documents, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

20^th Nov 23

Cyber Risk Factor:

4

Victim website:

bildco.ae

Victim country:

UAE

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

52 GB

Exfiltrated data type:

Employees’ data, financial documents, invoices, confidential documents, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

20^th Nov 23

Cyber Risk Factor:

4

Victim website:

riohondo.edu

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Confidential documents, passports, employees’ data, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

20^th Nov 23

Cyber Risk Factor:

4

Victim website:

patriotisk.dk

Victim country:

Denmark

Attacker name:

Akira

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

European personal documents, confidential agreements, and other papers

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

universalsewing.com

Victim country:

USA

Attacker name:

INC Ransom

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Invoices, certificates of organization and liability insurance, and sales invoices

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

vinovalie.com

Victim country:

France

Attacker name:

NoEscape

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

500 GB

Exfiltrated data type:

Confidential and critical data from the company’s servers

Leaked data:

/

Ransom deadline:

03^rd Nov 23

Cyber Risk Factor:

4

Victim website:

schoeler-gabelstapler.de

Victim country:

Germany

Attacker name:

8Base

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Invoices, receipts, accounting documents, personal data certificates, employment contracts, confidential information, confidentiality agreements, and personal files

Leaked data:

/

Ransom deadline:

08^th Nov 23

Cyber Risk Factor:

4

Victim website:

jai.com

Victim country:

Denmark

Attacker name:

8Base

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Invoices, receipts, accounting documents, personal data, certificates, employment contracts, confidential information, confidentiality agreements, and personal files

Leaked data:

/

Ransom deadline:

08^th Nov 23

Cyber Risk Factor:

4

Victim website:

armstrongconsultants.com

Victim country:

USA

Attacker name:

8Base

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Invoices, receipts, accounting documents, personal data, certificates, employment contracts, confidentiality agreements, and personal files

Leaked data:

/

Ransom deadline:

08^th Nov 23

Cyber Risk Factor:

4

Victim website:

traxall.fr

Victim country:

France

Attacker name:

8Base

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Invoices, receipts, accounting documents, personal data, certificates, employment contracts, confidentiality agreements, and personal files

Leaked data:

/

Ransom deadline:

08^th Nov 23

Cyber Risk Factor:

4

Victim website:

tanatexchemicals.com

Victim country:

Netherlands

Attacker name:

Metaencryptor

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

308 GB

Exfiltrated data type:

Miscellaneous including financial data

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

04^th Nov 23

Cyber Risk Factor:

4

Victim website:

gsp.com.br

Victim country:

Brazil

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

PII documents, confidential documents, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

gannons.co.uk

Victim country:

United Kingdom

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

PII documents, confidential documents, invoices, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

advarra.com

Victim country:

USA

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

120 GB

Exfiltrated data type:

Confidential data belonging to Advarra’s customers, patients, and all current and former employees, PII documents, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

iowala.org

Victim country:

USA

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including scans, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

summithealth.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

08^th Nov 23

Cyber Risk Factor:

4

Victim website:

utec.com.sa

Victim country:

Saudi Arabia

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

108 GB

Exfiltrated data type:

Miscellaneous including financial data, invoices, financial documents, technical documents, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

20^th Nov 23

Cyber Risk Factor:

4

Victim website:

/

Victim country:

USA

Attacker name:

Cl0p

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

3