news

Victim website:

mbwswim.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 4,500,000

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including insurance and financial documents

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

11^th May 23

Cyber Risk Factor:

5

Victim website:

cadopt.com

Victim country:

India

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

900GB

Exfiltrated data type:

Finance, Source code, HR, Clients’ data, Contracts, Projects, Developments.

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

ed.bs.ch

Victim country:

Switzerland

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

1,2 TB

Exfiltrated data type:

HR, Finance, Accounting, Financial data, Various students’ and employees’ personal data.

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

entelect.co.za

Victim country:

South Africa

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

1,3 TB

Exfiltrated data type:

SQL databases, Finance, Source codes, HR, Clients’ data, Contracts, Projects, Developments, Personal data.

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

gth.net

Victim country:

United Kingdom

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

1,2 TB

Exfiltrated data type:

Clients’ data: addresses, phone numbers, emails, birth dates, etc., Technical data: drawings, floor plans, etc., Scans of passports, NINOs, HR, Finance & Accounting.

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

pilgrim.lincs.sch.uk

Victim country:

United Kingdom

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

475 GB

Exfiltrated data type:

HR, Financial data, Pupils’ personal data: first/last name, address, DOB, NINO, Email, etc.

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

mercyhomeny.org

Victim country:

USA

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

553 GB

Exfiltrated data type:

HR, Accounting, Financial data, Patient’s data, Internal mail exports.

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

yelp.com/biz/synergy-hematology-oncology-medical-associates-los-angeles-2

Victim country:

USA

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

198 GB

Exfiltrated data type:

HR, Financial data, Patients’ medical and personal data: medical history, tests. etc.

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

logisuite.com

Victim country:

USA

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Internal email archives, Customers’ databases, Finance, Source codes, HR, Clients’ data, Contracts, Projects, Developments.

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

lifenet.it

Victim country:

Italy

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

1,5 TB

Exfiltrated data type:

Patients’ data: addresses, phone numbers, emails, etc., Employees’ data: addresses, phone numbers, emails, etc., Medical data and results, Biometric data, Finance & Accounting, Business data: contracts, agreements, etc., Partners’ and vendors’ data, Passports, IFCs, etc.

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

altstadtplumbing.com

Victim country:

USA

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

258 GB

Exfiltrated data type:

Business data, Personal data, HR, Financial data

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

bedfordlodgehotel.co.uk

Victim country:

United Kingdom

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

230 GB

Exfiltrated data type:

HR, Clients’ data, Accounting, Financial data.

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

commercepundit.com

Victim country:

USA

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

400 GB

Exfiltrated data type:

HR, Projects, Accounting, Financial data, Top management mail archives, Company data, including company relative, projects: subsidiaries, bitcoin mining, etc., SQL databases.

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

deerlakes.net

Victim country:

USA

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

180 GB

Exfiltrated data type:

HR, Students’ data, Accounting, Financial data.

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

humanagroup.com

Victim country:

Sweden

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

20 GB

Exfiltrated data type:

Patient’s personal data

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

idemsafety.com

Victim country:

United Kingdom

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

175,9 GB

Exfiltrated data type:

Clients’ personal data, Financial data, HR, Contracts.

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

manoir-saint-sauveur.com

Victim country:

Canada

Attacker name:

BianLian

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

370 GB

Exfiltrated data type:

Finance & Accounting, Business: contracts, partners’ and vendors’ data, etc., HR: SIN, phone number, DOB, street address, salary information, etc., Clients’ Data: adresses, phone numbers, emails, birth dates, credit card numbers, etc.

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

gocontec.com

Victim country:

Canada

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

282 GB

Exfiltrated data type:

Miscellaneous including employees’ documents, backup, invoices etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

11^th May 23

Cyber Risk Factor:

4

Victim website:

ahorrocoop.cl

Victim country:

Chile

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

Large amount of data

Exfiltrated data type:

Miscellaneous including photos, members details, financial documents etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

18^th May 23

Cyber Risk Factor:

4

Victim website:

mercer.edu

Victim country:

USA

Attacker name:

Akira

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Students and teachers personal information

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

3