Victim website:

siix.co.jp

Victim country:

Japan

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

1 TB

Exfiltrated data type:

Miscellaneous including financial documents and confidential data, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

rlcllc.com

Victim country:

USA

Attacker name:

0mega

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

1.54 TB

Exfiltrated data type:

N/A

Leaked data:

160 GB as a sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

piemmeonline.it

Victim country:

Italy

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including PII documents

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

intred.it

Victim country:

Italy

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including PII documents

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

kbs-accountants.nl

Victim country:

Netherlands

Attacker name:

NoEscape

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

45 GB

Exfiltrated data type:

Legal docs, legal documents, correspondence, lists and personal data of both clients and employees, the entire map of network computers has been copied, budget, finance from 1998 to 2023, banking, accounting, taxes, hundreds of passports, ID cards and driver licenses for both clients and employees, payments, invoices, audits, reports, insurance, and hundreds of thousands of other confidential and sensitive data of the company

Leaked data:

/

Ransom deadline:

25^th Oct 23

Cyber Risk Factor:

4

Victim website:

boiserm.org

Victim country:

USA

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Information on employees (ssn,dob, contracts, drug test) Information on all guests of the shelter (passport scan, ID scan, guest form with confidential data and specialist’s report, photos). Information on grants, Incident Reports, presentations, reports from events, photo and video materials, contact information on partners, information on volunteers, various financial documents, audits, tax forms, balance sheet, budget and many other working documents.

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

cpstate.org

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous documents including passwords, employees’ detail, financial data, backups, medical details, kids’ photo, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

23^rd Oct 23

Cyber Risk Factor:

5

Victim website:

gasmart.mx

Victim country:

Mexico

Attacker name:

NoEscape

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

184 GB

Exfiltrated data type:

450,000 confidential and private documents, such as: Confidential agreements and contracts, finance, budget, taxes, insurance, banking, analysis, reports, tens of thousands of legal documents and documents subject to the GDPR law, personal data of employees of clients and partners, passports, ID cards, driver’s licenses etc, documents on working with clients and tens of thousands of documents from other companies, invoices, backup data, certificates, declarations, Payroll-HR, HR and other confidential and sensitive company data.

Leaked data:

/

Ransom deadline:

27^th Oct 23

Cyber Risk Factor:

5

Victim website:

mthollynissan.com

Victim country:

USA

Attacker name:

NoEscape

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

4 GB

Exfiltrated data type:

Confidential agreements and contracts, evidence of insurance, monthly finance payment estimate, daily sales report, vehicle purchase receipt, clients personal data including first name, last name, date of birth, address, city, state, zip code, email, phone, SSN, driver’s license, passport, ID card, etc, certificates, taxes, payments, accounting, reports, banking, and thousands of other confidential and important documents.

Leaked data:

/

Ransom deadline:

23^rd Oct 23

Cyber Risk Factor:

4

Victim website:

ovt.com

Victim country:

USA

Attacker name:

Cactus

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including PII and non-disclosure documents, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

scsivrea.it

Victim country:

Italy

Attacker name:

Cactus

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including PII documents, contracts, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

believekids.com

Victim country:

USA

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 150,000

Exfiltrated data amount:

115 GB

Exfiltrated data type:

Miscellaneous including financial documents, invoices, photos, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

24^th Oct 23

Cyber Risk Factor:

4

Victim website:

symposiacongressi.com

Victim country:

Italy

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 100,000

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including banking and financial data, PII documents, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

30^th Oct 23

Cyber Risk Factor:

4

Victim website:

globalproducesales.com

Victim country:

USA

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 100,000

Exfiltrated data amount:

2.6 GB

Exfiltrated data type:

Miscellaneous including financial data

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

28^th Oct 23

Cyber Risk Factor:

4

Victim website:

edbelettronica.it

Victim country:

Italy

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 100,000

Exfiltrated data amount:

76.6 GB

Exfiltrated data type:

Miscellaneous including financial documents, scans, invoices, PII documents, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

26^th Oct 23

Cyber Risk Factor:

4

Victim website:

ati-traduction.com

Victim country:

France

Attacker name:

Medusa

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 100,000

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including financial and PII documents, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

24^th Oct 23

Cyber Risk Factor:

4

Victim website:

greenpoint.com

Victim country:

USA

Attacker name:

INC Ransom

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including confidential documents, payrolls, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

kasperekusaoptical.com

Victim country:

USA

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

23^rd Oct 23

Cyber Risk Factor:

3

Victim website:

sdproducts.co.uk

Victim country:

United Kingdom

Attacker name:

LockBit 3.0

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

23^rd Oct 23

Cyber Risk Factor:

3

Victim website:

catholiccharities.cc

Victim country:

USA

Attacker name:

INC Ransom

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Patient medical documents, confidential documents, medical records, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

colpipe.com

Victim country:

USA

Attacker name:

Ransomed

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

2.9 GB

Exfiltrated data type:

Miscellaneous documents

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

juliansanderslaw.com

Victim country:

USA

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

1 TB

Exfiltrated data type:

Clients’ legal cases, criminal records, DL, SSN, Medical records

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

17^th Oct 23

Cyber Risk Factor:

5

Victim website:

qsibanking.com

Victim country:

USA

Attacker name:

ALPHV/BlackCat

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

5 TB

Exfiltrated data type:

Finance, clients, SQL Base, developments, personal info, work info

Leaked data:

/

Ransom deadline:

N/A

Cyber Risk Factor:

5

Victim website:

faietamoto.it

Victim country:

Italy

Attacker name:

Knight

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous documents

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

16^th Oct 23

Cyber Risk Factor:

4

Victim website:

dececco.net

Victim country:

Italy

Attacker name:

Knight

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous including invoices

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

16^th Oct 23

Cyber Risk Factor:

4

Victim website:

bmwmuniquemotors.com.br

Victim country:

Brazil

Attacker name:

Knight

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Invoices, contracts, personal documents, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

18^th Oct 23

Cyber Risk Factor:

4

Victim website:

clevelandschools.org

Victim country:

USA

Attacker name:

INC Ransom

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Invoices, purchase orders, insurance, reports, students’ information, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

koreapetroleum.com

Victim country:

Republic of Korea

Attacker name:

NoEscape

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

145 GB

Exfiltrated data type:

Confidential agreement and contracts, finance, budget, tax data, payments, banking, import-export documents from 2011 to 2023, reports, certificate of analysis, development, projects, database, certificates, hundreds of business registration doc and 250k other confidential and important documents

Leaked data:

/

Ransom deadline:

23^rd Oct 23

Cyber Risk Factor:

4

Victim website:

ktkco.ir

Victim country:

Iran

Attacker name:

Arvin Club

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

ec.iau.ir

Victim country:

Iran

Attacker name:

Arvin Club

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

usa-intech.com

Victim country:

USA

Attacker name:

Snatch

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

14 GB

Exfiltrated data type:

N/A

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

doctorbruce.net

Victim country:

Canada

Attacker name:

Rhysida

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

$ 140,000

Exfiltrated data amount:

N/A

Exfiltrated data type:

Miscellaneous documents

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

21^st Oct 23

Cyber Risk Factor:

4

Victim website:

cogal.com

Victim country:

Italy

Attacker name:

Snatch

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

57.5

Exfiltrated data type:

N/A

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

ampersand.tv

Victim country:

USA

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

Financial data, confidential documents, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

baccarat.com

Victim country:

France

Attacker name:

BlackBasta

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

PII documents, employees’ detail, incident reports, invoices, email correspondence, etc.

Leaked data:

Sample with proof of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

4

Victim website:

kinesisfilm.it

Victim country:

Italy

Attacker name:

Knight

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

17^th Oct 23

Cyber Risk Factor:

3

Victim website:

jahesh.co

Victim country:

Iran

Attacker name:

Arvin Club

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

100% of the exfiltrated data

Ransom deadline:

N/A

Cyber Risk Factor:

3

Victim website:

duhocaau.vn

Victim country:

Vietnam

Attacker name:

Mallox

Attacker class:

Cybercrime

Attack technique:

Ransomware

Ransom demand:

N/A

Exfiltrated data amount:

N/A

Exfiltrated data type:

N/A

Leaked data:

/

Ransom deadline:

27^th Oct 23

Cyber Risk Factor:

3