The Brain Cipher ransomware group reported a breach of Deloitte UK and threatened to publish the data it had stolen earlier this week.
See also: Stoli Group declared bankruptcy after ransomware attack
However, despite the allegations, a Deloitte spokesperson told Infosecurity that their investigation indicates that the allegations relate to a single client's located outside of Deloitte's network.
"No Deloitte systems have been affected," the spokesperson said.
Brain Cipher, a ransomware group that first emerged earlier in 2024, said it had stolen 1TB of compressed data from an alleged breach at Deloitte, in a post published on December 4. The group gave the company 10 days, until December 15, to respond to the threat.
In its statement, the ransomware group said, “big companies don’t always do their jobs well.” The post also said it would expose how “the ‘basics’ of information security are not being followed” by Deloitte.
See also: Spain's tax office was cyberattacked by Trinity Ransomware
According to SentinelOne, Brain Cipher is involved in multiple extortion attacks, hosting a TOR-based data leakage website. The threat agent's payloads are based on LockBit 3.0.
In June 2024, Brain Cipher claimed responsibility for hacking into Indonesia 's Provisional National Data Center (PDNS) and disrupting the country's services. The ransomware gang initially demanded an $8 million ransom from PDNS, but later released the decryptor for free.
While Deloitte has distanced itself from the breach, that doesn’t mean an organization at the center of a ransomware claim remains unaffected. The mere suspicion of a breach can damage reputations, impact stock prices, or trigger costly and unnecessary responses.
See also: Russia arrests Wazawaka for links to ransomware gangs
Ransomware breaches pose a serious threat to data security and the smooth running of organizations. This type of malware demands that victims pay a sum of money to restore their encrypted data. It is important to take proactive security measures and follow best practices to avoid ransomware. These include keeping software and operating systems up-to-date, using strong passwords, and regularly backing up data. By implementing these measures, organizations can strengthen their data security and protect themselves from the effects of a ransomware attack.
Source: infosecurity-magazine
☁️ Keep safe copies with Proton Drive
Encrypted cloud storage from Proton — protect your files from ransomware, corruption, and data loss with end-to-end encryption.
- ✔ End-to-end encrypted files & backups
- ✔ Version history — recover files after ransomware
- ✔ Free space — sync across all devices
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
