Morley Companies Inc. disclosed a data breach after being attacked with ransomware on August 1, 2021, allowing threat actors to steal data before encrypting files.
See also: KP Snacks victim of Conti ransomware - Problems with distribution
Morley is an American company that offers business services to Fortune 500 and Global 100 companies, including meeting management, contact centers, trade show exhibit creation, and more.
In notifications released today and yesterday, Morley states that it suffered a ransomware attack on August 1, 2021, which resulted in its data being unavailable.
See also: Apple and Tesla supplier hit by ransomware
After investigating the attack, the company found that hackers stole the personal information of 521,046 people during the attack, including data about Morley employees, contractors and customers.
According to the announcement, the threat actors may have stolen the following types of data:
- Full name
- Social Security Number
- Date of birth
- Customer ID number
- Medical diagnostic and therapeutic information
- Health insurance information
Although the company's investigation has not determined the malicious use of the stolen information, Morley will cover the cost of 24 months of identity theft protection services through IDX for all affected individuals.
Those identified as affected will receive notifications with instructions on how to enroll in the IDX program.
Long-term research
Morley said they had to contact a cybersecurity expert to figure out why they couldn't access their files.
Once they learned of the cause, which was a ransomware infection, they worked with experts in the field to analyze the evidence and determine all affected parties.
See also: Group linked to Memento ransomware uses new PowerShell backdoor
While that sounds reassuring, cyber-intelligence platform HackNotice claims that it saw Morley's data on the dark web.
This is usually a sign that the data may be misused by other threat actors in future attacks, such as targeted phishingcampaigns.
Information source: bleepingcomputer.com
