Victim website:

boiserm.org

Victim country:

USA

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Information on employees (ssn,dob, contracts, drug test) Information on all guests of the shelter (passport scan, ID scan, guest form with confidential data and specialist’s report, photos). Information on grants, Incident Reports, presentations, reports from events, photo and video materials, contact information on partners, information on volunteers, various financial documents, audits, tax forms, balance sheet, budget and many other working documents.

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

cpstate.org

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous documents including passwords, employees’ detail, financial data, backups, medical details, kids’ photo, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

23^rd Oct 23

Cyber Risk Factor:

5

Victim website:

gasmart.mx

Victim country:

Mexico

Attacker name:

NoEscape

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

184 GB

Exfiltrated data type:

450,000 confidential and private documents, such as: Confidential agreements and contracts, finance, budget, taxes, insurance, banking, analysis, reports, tens of thousands of legal documents and documents subject to the GDPR law, personal data of employees of clients and partners, passports, ID cards, driver’s licenses etc, documents on working with clients and tens of thousands of documents from other companies, invoices, backup data, certificates, declarations, Payroll-HR, HR and other confidential and sensitive company data.

Leaked data:

/

Ransom deadline:

27^th Oct 23

Cyber Risk Factor:

5

Victim website:

mthollynissan.com

Victim country:

USA

Attacker name:

NoEscape

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

4 GB

Exfiltrated data type:

Confidential agreements and contracts, evidence of insurance, monthly finance payment estimate, daily sales report, vehicle purchase receipt, clients personal data including first name, last name, date of birth, address, city, state, zip code, email, phone, SSN, driver’s license, passport, ID card, etc, certificates, taxes, payments, accounting, reports, banking, and thousands of other confidential and important documents.

Leaked data:

/

Ransom deadline:

23^rd Oct 23

Cyber Risk Factor:

4

Victim website:

ovt.com

Victim country:

USA

Attacker name:

Cactus

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including PII and non-disclosure documents, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

scsivrea.it

Victim country:

Italy

Attacker name:

Cactus

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including PII documents, contracts, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

believekids.com

Victim country:

USA

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 150,000

Exfiltrated data amount:

115 GB

Exfiltrated data type:

Miscellaneous including financial documents, invoices, photos, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

24^th Oct 23

Cyber Risk Factor:

4

Victim website:

symposiacongressi.com

Victim country:

Italy

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 100,000

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including banking and financial data, PII documents, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

30^th Oct 23

Cyber Risk Factor:

4

Victim website:

globalproducesales.com

Victim country:

USA

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 100,000

Exfiltrated data amount:

2.6 GB

Exfiltrated data type:

Miscellaneous including financial data

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

28^th Oct 23

Cyber Risk Factor:

4

Victim website:

edbelettronica.it

Victim country:

Italy

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 100,000

Exfiltrated data amount:

76.6 GB

Exfiltrated data type:

Miscellaneous including financial documents, scans, invoices, PII documents, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

26^th Oct 23

Cyber Risk Factor:

4

Victim website:

ati-traduction.com

Victim country:

France

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 100,000

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including financial and PII documents, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

24^th Oct 23

Cyber Risk Factor:

4

Victim website:

greenpoint.com

Victim country:

USA

Attacker name:

INC Ransom

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including confidential documents, payrolls, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

kasperekusaoptical.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

23^rd Oct 23

Cyber Risk Factor:

3

Victim website:

sdproducts.co.uk

Victim country:

United Kingdom

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

23^rd Oct 23

Cyber Risk Factor:

3

Victim website:

catholiccharities.cc

Victim country:

USA

Attacker name:

INC Ransom

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Patient medical documents, confidential documents, medical records, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

colpipe.com

Victim country:

USA

Attacker name:

Ransomed

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

2.9 GB

Exfiltrated data type:

Miscellaneous documents

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

juliansanderslaw.com

Victim country:

USA

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

1 TB

Exfiltrated data type:

Clients’ legal cases, criminal records, DL, SSN, Medical records

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

17^th Oct 23

Cyber Risk Factor:

5

Victim website:

qsibanking.com

Victim country:

USA

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

5 TB

Exfiltrated data type:

Finance, clients, SQL Base, developments, personal info, work info

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

faietamoto.it

Victim country:

Italy

Attacker name:

Knight

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous documents

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

16^th Oct 23

Cyber Risk Factor:

4

Victim website:

dececco.net

Victim country:

Italy

Attacker name:

Knight

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including invoices

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

16^th Oct 23

Cyber Risk Factor:

4

Victim website:

bmwmuniquemotors.com.br

Victim country:

Brazil

Attacker name:

Knight

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Invoices, contracts, personal documents, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

18^th Oct 23

Cyber Risk Factor:

4

Victim website:

clevelandschools.org

Victim country:

USA

Attacker name:

INC Ransom

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Invoices, purchase orders, insurance, reports, students’ information, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

koreapetroleum.com

Victim country:

Republic of Korea

Attacker name:

NoEscape

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

145 GB

Exfiltrated data type:

Confidential agreement and contracts, finance, budget, tax data, payments, banking, import-export documents from 2011 to 2023, reports, certificate of analysis, development, projects, database, certificates, hundreds of business registration doc and 250k other confidential and important documents

Leaked data:

/

Ransom deadline:

23^rd Oct 23

Cyber Risk Factor:

4

Victim website:

ktkco.ir

Victim country:

Iran

Attacker name:

Arvin Club

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

ec.iau.ir

Victim country:

Iran

Attacker name:

Arvin Club

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

usa-intech.com

Victim country:

USA

Attacker name:

Snatch

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

14 GB

Exfiltrated data type:

N/A

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

doctorbruce.net

Victim country:

Canada

Attacker name:

Rhysida

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 140,000

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous documents

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

21^st Oct 23

Cyber Risk Factor:

4

Victim website:

cogal.com

Victim country:

Italy

Attacker name:

Snatch

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

57.5

Exfiltrated data type:

N/A

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

ampersand.tv

Victim country:

USA

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Financial data, confidential documents, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

baccarat.com

Victim country:

France

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

PII documents, employees’ detail, incident reports, invoices, email correspondence, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

kinesisfilm.it

Victim country:

Italy

Attacker name:

Knight

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

17^th Oct 23

Cyber Risk Factor:

3

Victim website:

jahesh.co

Victim country:

Iran

Attacker name:

Arvin Club

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

duhocaau.vn

Victim country:

Vietnam

Attacker name:

Mallox

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

27^th Oct 23

Cyber Risk Factor:

3

Victim website:

simtaspa.com

Victim country:

Italy

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 100,000

Exfiltrated data amount:

2,05 TB

Exfiltrated data type:

Details about the capital companies, credit documents, tax, HR, legal, customer data, PII documents, and much more.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

22^nd Oct 23

Cyber Risk Factor:

5

Victim website:

seattlehousing.org

Victim country:

USA

Attacker name:

NoEscape

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

158 GB

Exfiltrated data type:

Confidential Privacy Act Data, confidential agreements and contracts, NDA, passports, ID cards, driver’s licenses, SSN Cards, audit, accounting, development project, HR, account payable, client data and data of more than 150 PCs of employees were completely stolen, tens of thousands of scanned documents, insurance, letters, certificates, backups, analytics, reports, invoices, banking, taxes, finance, budget, and hundreds of thousands of other confidential and private data

Leaked data:

/

Ransom deadline:

22^nd Oct 23

Cyber Risk Factor:

5

Victim website:

alconex.com

Victim country:

USA

Attacker name:

Trigona

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 300,000

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including financial documents ant invoices

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

hospitalitaliano.org.ar

Victim country:

Argentina

Attacker name:

Knight

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous internal documents, etc.

Leaked data:

Sample with proof of the access to the hospital systems

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

morrisonhospital.com

Victim country:

USA

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

5 TB

Exfiltrated data type:

Patients and employee’s information, backups, PII documents, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

evasion.es

Victim country:

Spain

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 100,000

Exfiltrated data amount:

98 GB

Exfiltrated data type:

Miscellaneous including administrative documents, backups, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

21^st Oct 23

Cyber Risk Factor:

4

Victim website:

neodatagroup.com

Victim country:

Spain

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 100,000

Exfiltrated data amount:

133 GB

Exfiltrated data type:

Miscellaneous documents including customers’ detail, technical documents, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

20^th Oct 23

Cyber Risk Factor:

4

Victim website:

triway.riellosistemi.it

Victim country:

Canada

Attacker name:

Money Message

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including accounting, backups, HR, technical designs, contracts, financial data,

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

vicon-security.com

Victim country:

USA

Attacker name:

INC Ransom

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

50 GB

Exfiltrated data type:

Miscellaneous documents

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

bz-a.fr

Victim country:

France

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 100,000

Exfiltrated data amount:

N/A

Exfiltrated data type:

Financial documents, invoices, agreements, contracts, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

fpz.de

Victim country:

Germany

Attacker name:

Trigona

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 50,000

Exfiltrated data amount:

84 GB

Exfiltrated data type:

Miscellaneous documents including financial data, letters, invoices, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

03^rd Nov 23

Cyber Risk Factor:

4

Victim website:

akbasoglu.com

Victim country:

Turkey

Attacker name:

Knight

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Financial documents, logistics data, personal data, insurances, confidential information

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

16^th Oct 23

Cyber Risk Factor:

4

Victim website:

multidev.com

Victim country:

Canada

Attacker name:

Black Suit

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

18^th Oct 23

Cyber Risk Factor:

3