Skip to content

Hack Tuesday

Hacks of today 30/04/2024–01/05/2024

Today's HOT includes 29 victims by the notorious LockBit 3.0, BlackBasta, Embargo, Medusa, Akira, Play, Snatch, Everest, Qilin, Cl0p and RansomHub gangs.

The average Cyber Risk Factor is  3.8.

Read below the full list.

Disclaimer:

Data are collected from public info published on Dark Web.
The Cyber Risk factor is calculated on cyber attacks' impact based on available data.

It shows the severity of an event: 1 = low, 5 = critical

MELLITAH OIL - ENI

Victim website:

eni.com
mellitahog.ly

Victim country:

Libya
Italy

Attacker name:

RansomHub

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

1 TB

Exfiltrated data type:

Financial and banking documents, passport and insurance data, geological reports and forecasts, details of oil production in different regions, detailed engineering information about the company's facilities, secret correspondence, NDA documents, contracts, and supply amounts of various raw materials, classified information on company tenders, internal correspondence of company employees and clients, and detailed maps of resource extraction and engineering structures for their extraction by different time periods.

Leaked data:

Sample

Ransom deadline:

04th May 24

Cyber Risk Factor:

5

Image:

Mellitah Oil - ENI ransomware hackmanac

CANNES HOSPITAL

Victim website:

ch-cannes.fr

Victim country:

France

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

5

Image:

Cannes Hospital

BLACK DIAMOND CAPITAL MANAGEMENT

Victim website:

bdcm.com

Victim country:

USA

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

900 GB

Exfiltrated data type:

Company data, employee data, personal confidential documents, customer data, etc.

Leaked data:

Sample

Ransom deadline:

10th May 24

Cyber Risk Factor:

5

Image:

Black Diamond Capital Management

FIRSTMAC

Victim website:

firstmac.com.au

Victim country:

Australia

Attacker name:

Embargo

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

500 GB

Exfiltrated data type:

Databases, source codes, sensitive customer data

Leaked data:

/

Ransom deadline:

08th May 24

Cyber Risk Factor:

4

Image:

Firstmac

WOODFORDS FAMILY SERVICES

Victim website:

woodfords.org

Victim country:

USA

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 300,000

Exfiltrated data amount:

198.5 GB

Exfiltrated data type:

N/A

Leaked data:

Sample

Ransom deadline:

10th Apr 24

Cyber Risk Factor:

5

Image:

Woodfords Family Services

OTTLITE

Victim website:

ottlite.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

02nd May 24

Cyber Risk Factor:

3

Image:

OttLite

SELECT BUSINESS SYSTEMS OF BAKERSFIELD

Victim website:

sbsofbak.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

07th May 24

Cyber Risk Factor:

4

Image:

Select Business Systems of Bakersfield

GCH HOTEL GROUP

Victim website:

gchhotelgroup.com

Victim country:

Germany

Attacker name:

Akira

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

45 GB

Exfiltrated data type:

Personal docs of clients, NDAs, numerous financial documents.

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

GCH Hotel Group

STUDIO LIBESKIND

Victim website:

libeskind.com

Victim country:

USA

Attacker name:

Akira

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

18 GB

Exfiltrated data type:

Joint projects information, accounting files, passports, contracts, agreements and so on.

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Studio Libeskind

PROFILE PRODUCTS

Victim website:

profileproducts.com

Victim country:

USA

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Private and personal confidential data, clients documents, budget, payroll, accounting, contracts, taxes, IDs, finance information and etc.

Leaked data:

/

Ransom deadline:

03rd May 24

Cyber Risk Factor:

3

Image:

Profile Products

ADVANCED BUSINESS NETWORKS

Victim website:

netabn.com

Victim country:

USA

Attacker name:

Play

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Private and personal confidential data, clients documents, budget, payroll, accounting, contracts, taxes, IDs, finance information and etc.

Leaked data:

/

Ransom deadline:

03rd May 24

Cyber Risk Factor:

4

Image:

Advanced Business Networks

LEWIS BROTHERS BAKERIES

Victim website:

lewisbakeries.net

Victim country:

USA

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 1,000,000

Exfiltrated data amount:

115.92 GB

Exfiltrated data type:

Insurance documents, financial data, email correspondence, HR, marketing, employees’ data, invoices, security camera frames, etc.

Leaked data:

Sample

Ransom deadline:

09th May 24

Cyber Risk Factor:

5

Image:

Lewis Brothers Bakeries

S.A. PIAZZA & ASSOCIATES

Victim website:

wildmikesultimatepizza.com

Victim country:

USA

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 100,000

Exfiltrated data amount:

18.63 GB

Exfiltrated data type:

N/A

Leaked data:

Sample

Ransom deadline:

09th May 24

Cyber Risk Factor:

4

Image:

S.A. Piazza & Associates

MYOVISION

Victim website:

myovision.com

Victim country:

USA

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 100,000

Exfiltrated data amount:

18.61 GB

Exfiltrated data type:

Certificates, technical drawings, etc.

Leaked data:

Sample

Ransom deadline:

09th May 24

Cyber Risk Factor:

4

Image:

MyoVision

UK GOVERNMENT

Victim website:

Not available

Victim country:

United Kingdom

Attacker name:

Snatch

Attacker class:

Cybercrime

Attack technique:

Data leak

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Data belonging to Rishi Sunak, Prime Minister of the UK, Grant Shapps, Secretary of State for Defence, Jeremy Hunt, Chancellor of the Exchequer, Alexander Boris de Pfeffel Johnson, former Prime Minister of the UK, Richard Moore, the Chief of MI6, the UK Secret Intelligence Service, Felicity Oswald OBE, Interim Chief Executive Officer, and Sir Mark Peter Rowley QPM, head of London police.

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

3

Image:

UK government

MORTON WILLIAMS

Victim website:

mortonwilliams.com

Victim country:

USA

Attacker name:

Everest

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

150 GB

Exfiltrated data type:

N/A

Leaked data:

Fully published

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Morton Williams

THE WATERGATE HOTEL

Victim website:

thewatergatehotel.com

Victim country:

USA

Attacker name:

Qilin

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

PII documents, invoices, financial data, other miscellaneous documents.

Leaked data:

Sample

Ransom deadline:

03rd May 24

Cyber Risk Factor:

4

Image:

The Watergate Hotel

PILOT

Victim website:

pilotpen.com

Victim country:

USA

Attacker name:

Cl0p

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

4

Image:

Pilot

MCKINLEY PACKAGING COMPANY

Victim website:

mckinleypackaging.com

Victim country:

USA

Attacker name:

Cl0p

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

3

Image:

McKinley Packaging Company

PINNACLE ENGINEERING GROUP

Victim website:

pinnacle-engr.com

Victim country:

USA

Attacker name:

Cl0p

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

3

Image:

Pinnacle Engineering Group

CONCORR

Victim website:

concorr.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

08th May 24

Cyber Risk Factor:

3

Image:

Concorr

PEASE CONSTRUCTION

Victim website:

peaseinc.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

08th May 24

Cyber Risk Factor:

3

Image:

Pease Construction

YUPO

Victim website:

yupousa.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

08th May 24

Cyber Risk Factor:

3

Image:

Yupo

COLONIAL SCHOOL DISTRICT

Victim website:

colonialsd.org

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

08th May 24

Cyber Risk Factor:

4

Image:

Colonial School District

ANATOMAGE

Victim website:

anatomage.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

08th May 24

Cyber Risk Factor:

4

Image:

Anatomage

BLUEGRASS TECHNOLOGIES

Victim website:

bluegrasstechnologies.net

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

08th May 24

Cyber Risk Factor:

3

Image:

Bluegrass Technologies

THE CORDISH COMPANIES

Victim website:

cordish.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

08th May 24

Cyber Risk Factor:

3

Image:

The Cordish Companies

A&L IMMIGRATION

Victim website:

alimmigration.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

08th May 24

Cyber Risk Factor:

4

Image:

A&L Immigration

HOOKER FURNITURE

Victim website:

hookerfurniture.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

08th May 24

Cyber Risk Factor:

4

Image:

Hooker Furniture

Stay safe!

Hackmanac Team!

Clearer decisions. Better budgeting. Fewer losses.

From "how many attacks?" to "how much damage?"
The clarity needed for sharper strategy.