The DoppelPaymerhas published the first data it managed to steal from Optima Italia SpA, an Italian company that provides electricity, gas, telephony and Internet services.
Until yesterday, some services such as “Shop”, “Customers” and “Chat” were not accessible on website , as many customers complained, while some services not working properly.
The first problems, which still persist, appeared in early September, when dozens of customers began writing to the company's official Facebook , complaining about Internet, mobile network outages, and the inability to access certain areas of the website.
Other negative comments recorded on Trustpilotreferred to the inability to contact Optima Italia's call center because they were unable to connect to the internet and mobile networks after the cyberattack .
The ransomware attack was carried out by the DoppelPaymer group, which has already uploaded the first three documents stolen from the Italian company's servers, totaling around 11 MB of data, which were published on the group's website inside Tor networks.
Optima Italia SpA, wanted to reassure its customers by stating, through a press release, that for now no personal data has been stolen and that a team of its experts is working to verify any breaches and restore the normal functioning of its systems. Regarding the personal data protection rules (GDPR), the company has already informed the competent authorities.
The DoppelPaymer team mostly targets public institutions, companies and organizations that have an international reach.
The list of victims whose networks were encrypted, their data stolen, and then ransomed in bitcoins is long and includes names such as Pemex (Mexico's state-owned oil company), Visser Precision, a Colorado company active in the automotive and aerospace sectors, Tesla , and SpaceX.
Among the most recent victims of DoppelPaymer are the Royal Military College of Canada, the city of Torrance in California, the city of Knoxville in Tennessee and, above all, the University of Newcastle in late August.
After two weeks, the English University has not been able to restore full access to all IT systems, and it is not certain whether everything will be back to normal before the end of September, when classes for new students begin.
In the afternoon, the DoppelPaymer team published a tweet between funny and serious, likely addressed to Imtiaz Dharker and Chris Day, Chancellor and Vice-Chancellor of the University respectively, which said the following:
Source: SuspectFile
