The Play ransomware group has published data allegedly stolen from Dutch shipping logistics company Royal Dirkzwager.
See also: Dole: Ransomware attack led to data breach
The Play ransomware group has allegedly exposed confidential and sensitive material obtained from Dutch shipping intelligence agency Royal Dirkzwager. The data includes employee passports , contracts , and other documents. The criminals also claim to possess additional information that has not yet been disclosed, according to a report by Security Week.
On March 6, the Play ransomware group compromised Dirkzwager’s systems, resulting in the disruption of four services – most notably the port arrival platform Ship2Report. Recovery plans were then quickly put in place with alternative service options, and Ship2Report was successfully restored on the 13th. Fortunately, all affected services were fully restored on Wednesday!
See also: New credit card theft hacking campaign detected
See also: What malware distribution techniques does the ScarCruft hacking group use?
Dutch cybersecurity company Dirkzwager initiated discussions with the hackers and, in accordance with the specifications of the Dutch Data Protection Authority, submitted its notification.
With a notable history of cyberattacks, the notorious Play ransomware group has wreaked havoc on companies and organizations across a variety of industries. For example, in February, it wreaked havoc on the Oakland local government, disrupting its IT network and disrupting tax payments, library services ,parking tickets, and other vital functions. Other victims include A10 Networks (a computer software maker), the Argentine judiciary, and Rackspace (a publicly traded cloud hosting provider).
Unstoppable ransomware gangs are proving to be tough opponents, and even major shipping organizations have been hit. In January 2022, DNV’s well-known ShipManager platform was taken offline for several weeks due to a ransomware attack. In addition, APM Terminals’ global IT system faced extraordinary difficulties after being targeted with the NotPetya malware in 2017.
Source of information: maritime-executive.com
