news

Victim website:

henryschein.com

Victim country:

USA

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

35 TB

Exfiltrated data type:

Internal payroll data and shareholder folders

Leaked data:

Sample with proof of the exfiltrated data, clients, partners, employee sensitive data

Ransom deadline:

03^rd Nov 23

Cyber Risk Factor:

5

Victim website:

shimano.com

Victim country:

Japan

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

4.5 TB

Exfiltrated data type:

Employees (ID, NRIC, IC No., TIN Number, SSS Number, mail, telephone, residential address, passport scans, contracts marked CONFIDENTIALITY)

Financial documents (balance sheets, budget, PL reports, expense reports, bank statements, accounts payable and receivable reports, various tax forms and reports, audits, cashflow, plans, KPIs and many other important financial documents)

Client database (address, phone number, responsible person), reports, presentations, analytics, internal documents, mail correspondence, results of various meetings, minutes, developments, various confidential reports, sales reports, legal documents, factory inspection results (violations), projects, various reports from production, information about machines (robots), committee results, incident report

NDA, contracts, agreements, various diagrams/drawings marked CONFIDENTIAL, development materials, laboratory tests, tests, Corrective Action Report, many sources and other important documents.

Leaked data:

/

Ransom deadline:

05^th Nov 23

Cyber Risk Factor:

5

Victim website:

lafase.cl

Victim country:

Chile

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

204 GB

Exfiltrated data type:

Miscellaneous including financial documents

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

22^nd Nov 23

Cyber Risk Factor:

4

Victim website:

bindagroup.com

Victim country:

Italy

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including financial data, customer details, invoices, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

16^th Nov “3

Cyber Risk Factor:

4

Victim website:

ricardo.com

Victim country:

United Kingdom

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Private and personal confidential data, clients documents, IDs, HR, budget, documentation on subcontracts of military companies and departments of the USA and England, developments and technical documentation, tax, finance information and etc.

Leaked data:

/

Ransom deadline:

07^th Nov 23

Cyber Risk Factor:

4

Victim website:

gspcomponents.com

Victim country:

USA

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Private and personal confidential data, client documents, HR, budget, tax, finance information and etc.

Leaked data:

/

Ransom deadline:

07^th Nov 23

Cyber Risk Factor:

4

Victim website:

graininspection.com

Victim country:

USA

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Private and personal confidential data, client documents, budget, tax, finance information and etc.

Leaked data:

/

Ransom deadline:

07^th Nov 23

Cyber Risk Factor:

4

Victim website:

hilyards.com

Victim country:

USA

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Private and personal confidential information, clients’ documents, HR information, budget details, tax information, finance information, and more.

Leaked data:

/

Ransom deadline:

07^th Nov 23

Cyber Risk Factor:

4

Victim website:

jdrm.com

Victim country:

USA

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Private and personal confidential information, clients’ documents, HR data, budget information, technical documentation, tax and finance information, and more

Leaked data:

/

Ransom deadline:

07^th Nov 23

Cyber Risk Factor:

4

Victim website:

bry-air.com

Victim country:

USA

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Private and personal confidential information, clients’ documents, IDs, HR, budget, tax, and finance information

Leaked data:

/

Ransom deadline:

04^th Nov 23

Cyber Risk Factor:

4

Victim website:

agiledisplaysolutions.com

Victim country:

Taiwan

Attacker name:

NoEscape

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

18 GB

Exfiltrated data type:

SQL Backup, Confidential documents,

Contracts and agreements,

Banking, finance, payments, transfers,

Activity reports related to company activities,

Data on suppliers, and personal data of employees, as well as thousands of other important company documents.

Leaked data:

/

Ransom deadline:

13^th Nov 23

Cyber Risk Factor:

4

Victim website:

laborforce.com

Victim country:

USA

Attacker name:

NoEscape

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

5 GB

Exfiltrated data type:

Personal data of employees, budget, insurance, leadership, audit, agreement, confidential documents, etc.

Leaked data:

/

Ransom deadline:

11^th Nov 23

Cyber Risk Factor:

4

Victim website:

microtrain.net

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

27 GB

Exfiltrated data type:

Enrollment forms, business transactions, agreements, invoices, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

22^nd Nov 23

Cyber Risk Factor:

4

Victim website:

craft-maid.com

Victim country:

USA

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Private and personal confidential information, clients’ documents, HR information, budget, tax, finance information, and more

Leaked data:

/

Ransom deadline:

07^th Nov 23

Cyber Risk Factor:

3