Big Issue Group listed on Qilin ransomware leak site

• Ransomware group: Qilin
• Country: United Kingdom
• Sector: Professional Services
• Announcement date: March 25, 2024

The Qilin ransomware group has listed the United Kingdom-based organization Big Issue Group on its leak site. According to the announcement, the threat actors claim to have exfiltrated approximately 550 GB of confidential data from the organization.

The alleged attack and claims by Qilin

The Qilin group posted an announcement on March 25, 2024, claiming to have compromised Big Issue Group. The threat actors allege that the organization is attempting to conceal a data breach. According to the group's claims, the breach occurred around March 20, 2024. The attackers assert that the stolen information pertains to the organization's internal processes and personnel.

Ransomware groups often utilize leak sites to pressure victims into paying ransoms. This tactic is frequently associated with double-extortion schemes, where attackers not only encrypt an organization's systems to disrupt operations but also steal sensitive data to threaten its public release. By threatening to leak confidential information, the attackers aim to maximize their leverage over the victim organization.

The content of the alleged data breach

While no screenshots have been provided to verify the claims, the Qilin group alleges that the exfiltrated data contains a variety of sensitive materials. The information is said to include internal documentation and records essential to the organization's functions. The specific types of data allegedly stolen include:

• Personnel identification documents
• Personal data
• Contracts
• Financial records

The exposure of such diverse data types—ranging from individual identification to high-level financial and legal documents—represents a significant security incident for the target entity.

About Big Issue Group

Big Issue Group is a social enterprise and publishing organization based in the United Kingdom. The organization serves a specific social mission by providing income-earning opportunities to individuals who are homeless or socially excluded. The company is most widely recognized for publishing 'The Big Issue' magazine, which is sold by homeless vendors.

Risk assessment and organizational implications

The alleged breach of Big Issue Group carries several significant risks. The exposure of personnel identification documents and personal data may increase the risk of identity theft or targeted phishing attacks directed at the organization's employees and its business partners. Furthermore, the exposure of financial records and contracts could create secondary risks for the organization's commercial operations.

For organizations operating within the United Kingdom, such an incident may constitute a violation of data protection obligations under the UK GDPR, which could potentially lead to regulatory penalties. The use of double-extortion tactics by groups like Qilin also places immense pressure on an organization regarding its reputation management and its ability to maintain operational continuity.

In the professional services and social enterprise sectors, maintaining data integrity is vital for trust. Organizations facing similar threats often focus on defensive measures such as implementing robust access controls, maintaining offline backups, and conducting regular security awareness training to mitigate the risk of phishing. However, information regarding the specific capabilities and history of the Qilin group remains limited.