Auckland University of Technology targeted by Monti ransomware group

• Ransomware group: Monti
• Country: New Zealand
• Sector: Education
• Announcement date: September 21, 2023

Monti claims data breach at Auckland University of Technology

The threat actor known as Monti has listed approximately 60 GB of data on its leak site, claiming it belongs to Auckland University of Technology. This announcement, made on September 21, 2023, marks a significant potential exposure for the educational institution located in New Zealand.

Details of the claimed attack

According to the announcement made by the Monti group, the threat actor claims to have obtained approximately 60 GB of data from the institution's systems. The group further alleges that the institution's security measures are insufficient and states that the full data will be leaked. The group's claim regarding the attack date is noted as September 22, 2023.

Ransomware groups often utilize leak sites to exert pressure on victims through a method known as double extortion. In such scenarios, attackers not only encrypt an organization's data to disrupt operations but also threaten to publish sensitive information on public forums if a ransom is not paid. This tactic aims to maximize the pressure on the victim by threatening reputational damage and legal consequences.

Data involved in the incident

The information provided regarding the specifics of the breach is limited. A screenshot indicates that approximately 60 GB of data has been obtained and lists a file named 'autistics.txt'. There is no detailed information regarding the specific content of the leaked data, and the listing names no specific data types.

About Auckland University of Technology

Founded in 1895, Auckland University of Technology is a public university located in Auckland, New Zealand. The institution offers a variety of certificate, undergraduate, and postgraduate degree programs.

Risk assessment and implications

This incident may pose a risk of exposure for student and staff data within Auckland University of Technology. Such leaks against educational institutions may create grounds for identity theft and targeted phishing attacks. The use of stolen credentials or personal information from such breaches often serves as a foundation for subsequent social engineering campaigns.

Furthermore, investigations into the institution's data protection processes may be seen under New Zealand's privacy laws. When large volumes of data are compromised, regulatory bodies often review whether the organization maintained adequate technical and organizational measures to protect personal information.

Public information about the Monti group is limited, and the group's activities should be monitored closely. For organizations in the education sector, maintaining robust security postures is essential to mitigate the risks of such targeted attacks. Common defensive steps for organizations include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular security awareness training for staff and students to defend against phishing attempts.