Diamcad targeted by meow ransomware group in alleged data breach

• Ransomware group: meow
• Country: Belgium
• Sector: Manufacturing
• Announcement date: August 28, 2024

The meow group claims a breach of Diamcad

The threat actor known as meow has listed a significant amount of data on its leak site, claiming the information belongs to the Belgian company Diamcad. According to the announcement made on August 28, 2024, the group alleges it has successfully exfiltrated approximately 120 GB of data from the organization. This incident follows a pattern of double extortion, a tactic where ransomware groups not only encrypt an organization's systems but also steal sensitive information to use as leverage during ransom negotiations.

In such extortion schemes, the threat actor typically threatens to release the stolen data on a public leak site if the victim fails to meet specific financial demands. This pressure is designed to force the organization to pay to prevent the exposure of sensitive corporate or personal information. In this specific case, the meow group has set a ransom demand of 20,000 USD for a single buyer, while offering a lower price of 7,000 USD if the data is sold to multiple buyers.

Details of the alleged data theft

The announcement made by the meow group suggests that the stolen data contains a wide range of operational and personal records. Based on the information provided by the threat actor, the breach involves various types of sensitive documentation that could impact both the company's internal operations and the privacy of its personnel. The group's claims indicate that the stolen material includes:

• Employee data
• Director data
• Financial information
• Identity documents

Visual evidence provided via screenshots further supports the claim that the data contains employee and director records, as well as detailed information regarding diamond processing technologies. Notably, the screenshots also appear to show samples of identity cards, which significantly increases the sensitivity of the leak regarding personal identification.

About Diamcad

Diamcad is a Belgian company that operates within the manufacturing sector. The organization specializes in the precision cutting and shaping of diamonds. To maintain high standards of quality, the company leverages advanced technology to produce meticulously crafted diamonds for its clients.

Potential risks and organizational implications

The alleged leak of such a large volume of data poses several critical risks to Diamcad. The exposure of personal data belonging to both employees and directors introduces a substantial risk of identity theft. Furthermore, because the organization is based in Belgium, this incident could potentially lead to significant data protection violations under the General Data Protection Regulation (GDPR), which governs how personal data must be handled and protected within the European Union.

Beyond the privacy concerns, the exposure of financial records and proprietary information regarding diamond processing technologies may weaken the organization's competitive advantage. The loss of trade secrets can be devastating for companies in specialized manufacturing sectors. Additionally, the availability of such data on a leak site can facilitate secondary attacks, such as targeted phishing or social engineering campaigns directed at the company's staff or business partners.

Given the nature of these threats, organizations in the manufacturing sector often find it necessary to review their security protocols and strengthen their defensive postures. This typically includes enhancing monitoring capabilities, implementing stricter access controls, and ensuring robust backup strategies are in place. Furthermore, when a breach of this nature is suspected, organizations may need to notify relevant regulatory authorities to remain compliant with legal frameworks like the GDPR.