Skip to content

Hack Tuesday

Hacks of today 24/01/2024

Today's HOT includes 34 ransomware victims by the notorious BlackBasta, Akira, LockBit 3.0, Abyss, ALPHV/BlackCat, 8Base, Cl0p, Medusa, Meow and MyData/AlphaLocker gangs.

The average Cyber Risk Factor is 3.9.

Read below the full list.

Disclaimer:

Data are collected from public info published on Dark Web.
The Cyber Risk factor is calculated on cyber attacks' impact based on available data.
It shows the severity of an event: 1 = low, 5 = critical

STEMCOR

Victim website:

stemcor.com

Victim country:

United Kingdom

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

1.2 TB

Exfiltrated data type:

Employee files, finance, accounting, etc.

Leaked data:

Sample

Ransom deadline:

28th Jan 24

Cyber Risk Factor:

5

Image:

STEMCOR

UNITED INDUSTRIES

Victim website:

unitedindustries.co.nz

Victim country:

New Zealand

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

155 GB

Exfiltrated data type:

Personal user folders, accounts, finance data, etc.

Leaked data:

Sample

Ransom deadline:

29th Jan 24

Cyber Risk Factor:

4

Image:

United Industries

PRUDENT PUBLISHING COMPANY

Victim website:

prudentpublishing.com

Victim country:

USA

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

352 GB

Exfiltrated data type:

User personal folders, HR, tax confidential forms, etc.

Leaked data:

Sample

Ransom deadline:

27th Jan 24

Cyber Risk Factor:

4

Image:

Prudent Publishing Company

CINFAB

Victim website:

cinfab.com

Victim country:

USA

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

1.1 TB

Exfiltrated data type:

Employee files, budgets, projects, user personal folders, etc.

Leaked data:

Sample

Ransom deadline:

27th Jan 24

Cyber Risk Factor:

5

Image:

CINFAB

HIGH ARCTIC ENERGY SERVICES

Victim website:

haes.ca

Victim country:

Canada

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

345 GB

Exfiltrated data type:

HR, financial data, Executive and Governance, administration, projects, etc.

Leaked data:

Sample

Ransom deadline:

26th Jan 24

Cyber Risk Factor:

4

Image:

High Arctic Energy Services

KIVI BROS. TRUCKING

Victim website:

kivibros.com

Victim country:

USA

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

111 GB

Exfiltrated data type:

HR, payrolls, accounting, etc.

Leaked data:

Sample

Ransom deadline:

26th Jan 24

Cyber Risk Factor:

4

Image:

Kivi Bros. Trucking

DUPONT RESTAURATION

Victim website:

dupont-restauration.fr

Victim country:

France

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

540 GB

Exfiltrated data type:

Accounting and employees’ data, etc.

Leaked data:

Fully published

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Dupont Restauration

KTBS LAW

Victim website:

ktbslaw.com

Victim country:

USA

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

735 GB

Exfiltrated data type:

Financial data, accounting, users personal folders, confidential documents, etc.

Leaked data:

Fully published

Ransom deadline:

N/A

Cyber Risk Factor:

5

Image:

KTBS Law

FAIRMONT FEDERAL CREDIT UNION

Victim website:

fairmontfcu.com

Victim country:

USA

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

403 GB

Exfiltrated data type:

Users’ data, legal documents, loans, corporate data, personal documents, scans, etc.

Leaked data:

Sample

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Fairmont Federal Credit Union

MILESTONE ENVIRONMENTAL CONTRACTING

Victim website:

milestoneenv.ca

Victim country:

Canada

Attacker name:

Akira

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Clients, projects, contracts, etc.

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Milestone Environmental Contracting

WILHOIT PROPERTIES

Victim website:

wilhoitliving.com

Victim country:

USA

Attacker name:

Akira

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

HR, incident reports, financial data, SSNs, etc.

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Wilhoit Properties

CRYOPAK

Victim website:

cryopak.com

Victim country:

USA

Attacker name:

Akira

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Passports, driver's licenses, NDAs, confidential agreements, etc.

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Cryopak

LYON SHIPYARD

Victim website:

lyonshipyard.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

05th Feb 24

Cyber Risk Factor:

3

Image:

Lyon Shipyard

SIERRA FRONT GROUP

Victim website:

sierrafrontgroup.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

05th Feb 24

Cyber Risk Factor:

4

Image:

Sierra Front Group

MICROMETALS

Victim website:

micrometals.com

Victim country:

USA

Attacker name:

Abyss

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

997 GB

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

28th Jan 24

Cyber Risk Factor:

5

Image:

Micrometals

SYNERGY FINANCIAL GROUP

Victim website:

synergyfinancialgrp.com

Victim country:

USA

Attacker name:

Abyss

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

97 GB

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

28th Jan 24

Cyber Risk Factor:

4

Image:

Synergy Financial Group

MBC LAW

Victim website:

mbclaw.ca

Victim country:

Canada

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

1 TB

Exfiltrated data type:

Passports, credit cards, bank accounts, bank statements, private mail, private agreements with clients, etc.

Leaked data:

Sample

Ransom deadline:

N/A

Cyber Risk Factor:

5

Image:

MBC Law

GROUPE SWEETCO

Victim website:

groupesweetco.com

Victim country:

France

Attacker name:

8Base

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Invoices, receipts, accounting documents, personal data, certificates, employment contracts, confidentiality agreements, personal files, etc.

Leaked data:

/

Ransom deadline:

31st Jan 24

Cyber Risk Factor:

3

Image:

Groupe Sweetco

BIKESPORTZ IMPORTS

Victim website:

bikesportz.com.au

Victim country:

Australia

Attacker name:

8Base

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Invoices, receipts, accounting documents, personal data, certificates, employment contracts, confidentiality agreements, personal files, etc.

Leaked data:

/

Ransom deadline:

31st Jan 24

Cyber Risk Factor:

4

Image:

BikeSportz Imports

LA LIGUE DE L’ENSEIGNEMENT DE L’ISÈRE

Victim website:

laligue38.org

Victim country:

France

Attacker name:

8Base

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Invoices, receipts, accounting documents, personal data, certificates, employment contracts, confidentiality agreements, personal files, etc.

Leaked data:

/

Ransom deadline:

31st Jan 24

Cyber Risk Factor:

4

Image:

LA LIGUE DE L’ENSEIGNEMENT DE L’ISÈRE

MIDWEST SERVICE CENTER

Victim website:

midwestservicecenter.com

Victim country:

USA

Attacker name:

8Base

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Invoices, receipts, accounting documents, personal data, certificates, employment contracts, confidentiality agreements, personal files, etc.

Leaked data:

/

Ransom deadline:

31st Jan 24

Cyber Risk Factor:

4

Image:

Midwest Service Center

SUNFAB HYDRAULICS

Victim website:

sunfab.se

Victim country:

Sweden

Attacker name:

8Base

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Invoices, receipts, accounting documents, personal data, certificates, employment contracts, confidentiality agreements, personal files, etc.

Leaked data:

/

Ransom deadline:

31st Jan 24

Cyber Risk Factor:

4

Image:

Sunfab Hydraulics

GLIMSTEDT

Victim website:

glimstedt.se

Victim country:

Sweden

Attacker name:

8Base

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Invoices, receipts, accounting documents, personal data, certificates, employment contracts, confidentiality agreements, personal files, etc.

Leaked data:

/

Ransom deadline:

31st Jan 24

Cyber Risk Factor:

4

Image:

Glimstedt

S&A LAW OFFICES

Victim website:

sandalawoffices.com

Victim country:

India

Attacker name:

Cl0p

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous documents including clients and employees’ data, confidential documents, email correspondence, full login credential to several websites, etc.

Leaked data:

Several samples

Ransom deadline:

N/A

Cyber Risk Factor:

5

Image:

S&A Law Offices

SIGNATURE PERFORMANCE INSURANCE

Victim website:

signatureperformance.com

Victim country:

USA

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 2,500,000

Exfiltrated data amount:

N/A

Exfiltrated data type:

Database, financial documents, invoices, reports, staff data, PII documents, confidential documents, etc.

Leaked data:

Sample

Ransom deadline:

02nd Feb 24

Cyber Risk Factor:

5

Image:

Signature Performance Insurance

WINONA PATTERN & MOLD

Victim website:

winonapattern.com

Victim country:

USA

Attacker name:

Meow

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 60,000

Exfiltrated data amount:

30 GB

Exfiltrated data type:

Miscellaneous including confidential files and developments (SpaceX,Volvo,Boeing,Siemens and etc), users, sales, management, etc.

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Winona Pattern & Mold

MIKE FERRY

Victim website:

mikeferry.com

Victim country:

USA

Attacker name:

MyData/AlphaLocker

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Accounting, clients’ personal data, etc.

Leaked data:

Fully published

Ransom deadline:

Expired

Cyber Risk Factor:

3

Image:

Mike Ferry

A24GROUP

Victim website:

a24group.com

Victim country:

United Kingdom

Attacker name:

MyData/AlphaLocker

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

100 GB

Exfiltrated data type:

Database

Leaked data:

Fully published

Ransom deadline:

Expired

Cyber Risk Factor:

4

Image:

A24Group

AMBITION24HOURS

Victim website:

ambition24hours.co.za

Victim country:

South Africa

Attacker name:

MyData/AlphaLocker

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

Fully published

Ransom deadline:

Expired

Cyber Risk Factor:

3

Image:

Ambition24hours

ACCOLADE GROUP

Victim website:

accolade-group.com

Victim country:

Canada

Attacker name:

MyData/AlphaLocker

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

Fully published

Ransom deadline:

Expired

Cyber Risk Factor:

3

Image:

Accolade Group

LEVELWEAR

Victim website:

levelwear.com

Victim country:

Canada

Attacker name:

MyData/AlphaLocker

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

Fully published

Ransom deadline:

Expired

Cyber Risk Factor:

3

Image:

Levelwear

GADOT BIOCHEMICAL INDUSTRIES

Victim website:

gadotbio.com

Victim country:

Israel

Attacker name:

MyData/AlphaLocker

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

Fully published

Ransom deadline:

Expired

Cyber Risk Factor:

4

Image:

Gadot Biochemical Industries

CARRI SYSTEMS

Victim website:

carri.com

Victim country:

France

Attacker name:

MyData/AlphaLocker

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Customer data, financial data of the company, employee information, etc.

Leaked data:

Fully published

Ransom deadline:

Expired

Cyber Risk Factor:

3

Image:

CARRI Systems

INTEGRITY

Victim website:

IntegrityInc.org

Victim country:

USA

Attacker name:

MyData/AlphaLocker

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Confidential data, database, accounting, etc.

Leaked data:

Fully published

Ransom deadline:

Expired

Cyber Risk Factor:

3

Image:

Integrity

Stay safe!

Hackmanac Team!

← Hacks of today 23/01/2024 Hacks of today 25/01/2024 →

More from Hack Tuesday

Clearer decisions. Better budgeting. Fewer losses.

From "how many attacks?" to "how much damage?" — the clarity needed for sharper strategy.

Book a demo Open HackRisk Open HackLoss