Dispossessor ransomware group lists onyourmark.org on its leak site

• Ransomware group: Dispossessor
• Country: United States
• Sector: Professional Services
• Announcement date: April 19, 2024

The ransomware group known as Dispossessor has listed the organization onyourmark.org on its leak site. The threat actor claims to have successfully compromised the organization's systems and asserts that data belonging to the entity has been stolen and published.

The claims made by Dispossessor

According to the announcement posted on the group's leak site, the Dispossessor ransomware group alleges that they gained unauthorized access to the internal systems of onyourmark.org. The group's claim indicates that the breach occurred or the data was uploaded around November 23, 2023. The announcement serves as a notification of the alleged compromise, with the group threatening to publish the stolen information.

In many modern ransomware attacks, threat actors employ a tactic known as double extortion. In this scenario, attackers do not merely encrypt an organization's files to disrupt operations; they also exfiltrate sensitive data. The threat of leaking this data on a public leak site is used as leverage to pressure the victim into paying a ransom. If the ransom is not met, the attackers proceed to release the information to the public, causing significant reputational and legal damage.

The listing on the leak site functions as a public shaming mechanism. By publishing the names of their victims, ransomware groups aim to increase the pressure on the targeted organizations. This method is particularly effective against entities that handle sensitive information, as the threat of public exposure can be more damaging than the operational downtime caused by encryption.

Information regarding the leaked data

Regarding the specific content of the data that the group claims to have stolen, there is currently no specific information available. The available evidence, such as screenshots provided by the group, only displays the organization's mission statement rather than any sensitive files or databases. Consequently, the listing names no specific data types or file counts.

While the group has made the claim of a data breach, the actual volume of data and the specific nature of the compromised files remain unknown at this time. There has been no confirmation regarding the exact contents of the alleged leak beyond the general organizational information displayed on the leak site.

About onyourmark.org

On Your Mark is an organization based in Staten Island that provides innovative and comprehensive community-based services. The organization focuses on supporting individuals with intellectual and developmental disabilities throughout their lifespan. Their primary mission is to improve the quality of life for these individuals and to support their active participation within the community.

Implications and organizational risks

The actions taken by the Dispossessor group may lead to the exposure of sensitive data held by the organization. Because On Your Mark provides specialized services to individuals with disabilities, a potential data breach could trigger significant legal processes under relevant data protection regulations. The sensitivity of the demographic served by the organization increases the potential impact of a successful data exfiltration.

The publication of such data might create secondary risks for the service recipients. These risks include the possibility of identity theft or the execution of targeted phishing attacks against the individuals receiving services. When attackers obtain personal details, they can craft highly convincing fraudulent communications to exploit the victims.

The Dispossessor group emerged in late 2023 and has been associated with activities targeting law enforcement infrastructure. This history suggests a level of sophistication that can have negative implications for organizational trust. To mitigate such risks, organizations in the professional services sector often implement defensive measures such as multi-factor authentication, regular security awareness training, and robust data encryption protocols to protect sensitive client information.