HR company Randstad announced late last week that network was compromised by Egregor ransomware, resulting in the theft of unencrypted files . Randstad is the world’s largest HR company, currently operating in 38 markets and owns the popular job site Monster.com. Randstad employs over 38,000 people and had revenue of €23.7 billion in 2019.
The Egregor ransomware gang behind the attackhas released 1% of the data it claims to have stolen during the recent cyberattack. Specifically, it released a 32.7 MB archive containing 184 files, including accounting spreadsheets, financial reports, legal documents, and other business documents.
After the hackers leaked the data, Randstad issued a security alert confirming that the Egregor ransomware gang had carried out a malicious attack against it.
Randstad said that only a small number servers , noting that its network and business operations continued to operate without interruption.
According to BleepingComputer, the company confirmed that the data was stolen, but is still investigating whether the hackers gained access to the personal data of its customers and employees. So far, it is estimated that data related to the company's operations in the United States, Poland, Italy and France has been stolen. In addition, Randstad said that it is trying to determine through the investigation what data the attackers gained access to, so that it can take the necessary measures to identify and notify the affected individuals.
The Egregor ransomware gang appeared on the threat landscape in mid-September 2020, around the same time that the infamous Maze ransomware gang ceased operations. Since its appearance, the Egregor gang has affected a large number of companies and organizations around the world. It is worth noting that many of the Maze gang members were integrated into the Egregor gang, which allowed the new malicious enterprise to quickly develop its attacks, counting numerous victims.
Among the gang's most well-known attacks targeting high-profile companies are those that hit Cencosud, Crytek, Ubisoft and Barnes & Noble, while last week the Kmart and Vancouver's transit system.
