ACE Air Cargo listed on Hunters ransomware leak site

• Ransomware group: Hunters
• Country: United States
• Sector: Transportation
• Announcement date: March 9, 2024

The ransomware group known as Hunters has listed the United States-based logistics provider ACE Air Cargo on its dedicated leak site. According to the announcement made on March 9, 2024, the threat actor claims to have successfully breached the organization's systems and encrypted its data, marking a significant security incident for the transportation company.

The claimed attack and breach details

The Hunters ransomware group has published a claim on their platform alleging they have compromised the operational infrastructure of ACE Air Cargo. The group asserts that they have gained unauthorized access to the organization's systems and subsequently encrypted its data. This announcement was officially added to the group's leak platform on March 9, 2024, which coincides with the date the group claims the attack took place.

In modern cyberattack landscapes, ransomware groups often utilize a tactic known as double extortion. In this scenario, attackers do not merely encrypt a victim's files to disrupt operations; they also exfiltrate sensitive information before the encryption process begins. This allows the attackers to threaten the victim with the public release of stolen data if a ransom is not paid. This method increases the pressure on the target organization, as the threat of data exposure can lead to severe reputational and legal consequences.

Data involved in the leak

Based on the information provided by the attackers, the volume of data involved in this incident is substantial. The group claims to have leaked a dataset that includes a significant number of files, though they have not specified the exact nature of the information contained within them.

• Total data size: 250.4 GB
• Total file count: 272,624 files

While the size and quantity of the files have been disclosed by the group, no detailed information regarding the specific types of data—such as personal records or financial information—has been provided in the announcement. The listing currently names no specific data types.

About ACE Air Cargo

ACE Air Cargo is a United States-based air cargo and logistics services provider. The company offers various freight transportation and logistics solutions to its clients, operating within the critical transportation sector.

Implications and potential risks

This incident indicates that sensitive data within ACE Air Cargo may have been exposed to unauthorized third parties. Such exposure introduces various secondary risks that the organization and its stakeholders may face. For the company's employees and customers, the presence of stolen data on a leak site can lead to risks such as identity theft or the execution of targeted phishing attacks.

Because ACE Air Cargo is a United States-based organization, this breach may trigger legal processes under state-level data breach notification laws and other sector-specific regulations. Organizations operating in the transportation and logistics sector often handle vast amounts of operational and client data, making them high-value targets for cybercriminals seeking to exploit supply chain vulnerabilities.

To address the aftermath of such an incident, organizations typically need to conduct a comprehensive forensic investigation. This process is essential to determine the true scope of the leaked data and to identify the specific entry points used by the attackers. Furthermore, as the Hunters group is assessed to use the Hive codebase, it is considered that the group may favor double-extortion tactics, which necessitates a robust incident response plan to manage both the technical recovery and the data privacy implications.