news

Victim website:

boiserm.org

Victim country:

USA

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Information on employees (ssn,dob, contracts, drug test) Information on all guests of the shelter (passport scan, ID scan, guest form with confidential data and specialist’s report, photos). Information on grants, Incident Reports, presentations, reports from events, photo and video materials, contact information on partners, information on volunteers, various financial documents, audits, tax forms, balance sheet, budget and many other working documents.

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

cpstate.org

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous documents including passwords, employees’ detail, financial data, backups, medical details, kids’ photo, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

23^rd Oct 23

Cyber Risk Factor:

5

Victim website:

gasmart.mx

Victim country:

Mexico

Attacker name:

NoEscape

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

184 GB

Exfiltrated data type:

450,000 confidential and private documents, such as: Confidential agreements and contracts, finance, budget, taxes, insurance, banking, analysis, reports, tens of thousands of legal documents and documents subject to the GDPR law, personal data of employees of clients and partners, passports, ID cards, driver’s licenses etc, documents on working with clients and tens of thousands of documents from other companies, invoices, backup data, certificates, declarations, Payroll-HR, HR and other confidential and sensitive company data.

Leaked data:

/

Ransom deadline:

27^th Oct 23

Cyber Risk Factor:

5

Victim website:

mthollynissan.com

Victim country:

USA

Attacker name:

NoEscape

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

4 GB

Exfiltrated data type:

Confidential agreements and contracts, evidence of insurance, monthly finance payment estimate, daily sales report, vehicle purchase receipt, clients personal data including first name, last name, date of birth, address, city, state, zip code, email, phone, SSN, driver’s license, passport, ID card, etc, certificates, taxes, payments, accounting, reports, banking, and thousands of other confidential and important documents.

Leaked data:

/

Ransom deadline:

23^rd Oct 23

Cyber Risk Factor:

4

Victim website:

ovt.com

Victim country:

USA

Attacker name:

Cactus

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including PII and non-disclosure documents, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

scsivrea.it

Victim country:

Italy

Attacker name:

Cactus

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including PII documents, contracts, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

believekids.com

Victim country:

USA

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 150,000

Exfiltrated data amount:

115 GB

Exfiltrated data type:

Miscellaneous including financial documents, invoices, photos, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

24^th Oct 23

Cyber Risk Factor:

4

Victim website:

symposiacongressi.com

Victim country:

Italy

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 100,000

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including banking and financial data, PII documents, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

30^th Oct 23

Cyber Risk Factor:

4

Victim website:

globalproducesales.com

Victim country:

USA

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 100,000

Exfiltrated data amount:

2.6 GB

Exfiltrated data type:

Miscellaneous including financial data

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

28^th Oct 23

Cyber Risk Factor:

4

Victim website:

edbelettronica.it

Victim country:

Italy

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 100,000

Exfiltrated data amount:

76.6 GB

Exfiltrated data type:

Miscellaneous including financial documents, scans, invoices, PII documents, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

26^th Oct 23

Cyber Risk Factor:

4

Victim website:

ati-traduction.com

Victim country:

France

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 100,000

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including financial and PII documents, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

24^th Oct 23

Cyber Risk Factor:

4

Victim website:

greenpoint.com

Victim country:

USA

Attacker name:

INC Ransom

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including confidential documents, payrolls, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

kasperekusaoptical.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

23^rd Oct 23

Cyber Risk Factor:

3

Victim website:

sdproducts.co.uk

Victim country:

United Kingdom

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

23^rd Oct 23

Cyber Risk Factor:

3