On March 17, the DoppelPaymer threat actors added Azusa Police Department in California to the leak site where they list ransomware victims who have refused to pay their ransom demands. On April 22, the threat actors increased the pressure on the department — or attempted to — by dumping some files as proof that they…
Category: Malware
Au: BLK Sport reveals DarkSide attack
On May 26, BLK Sport disclosed that they had been attacked by DarkSide on April 21, 2021. Of note, the firm states that they have to assume that information may have been exfiltrated (because that’s how DarkSide normally operated), but they have been unable to actually determine the extent of any information theft. According to their…
MA: Sturdy Hospital pays ransom after patient information is stolen
Updated June 1: External counsel for the hospital notified the Maine Attorney General’s Office that this incident resulted in notifications to 42,336 people and that those affected were offered two years of Experian credit and identity monitoring services. Updated June 3: It seems that on May 28, they notified HHS that they notified 57,379, so…
It: Municipality of Porto Sant’Elpidio publicly quiet after ransomware attack and partial dump of files
This week, DataBreaches.net reported on a new dedicated leak site and threat actors who had hit Clover Park School District in Washington. The same threat actors, whose name is not even clear (are they PayOrGrief or Grief_List or…) have listed three other victims on their site who presumably did not pay their ransom demands. One…
Caravus impacted by Netgain Technology breach because vendor failure to destroy legacy data
I’ve continued to add updates to a post about the Netgain Technology breach. Keep in mind that the ransomware incident occurred in November, 2020, and since January, we have seen entities disclosing the incident. But one disclosure today is somewhat frustrating to read — and not just for the delay in notification, but for the…
De: Waschbär reports cyberattack
Waschbär is an environmentally friendly online retailer of clothes, household goods, and other products. On its web site, there is a notice about a malware incident (the following is a machine translation. “Waschbär” means “raccoon.”) A more detailed version follows from their May 26 statement (machine translation): On Wednesday afternoon, May 19th, 2021, our company…