Dispossessor ransomware group lists schnabel-eng.com on its leak site
The ransomware group known as Dispossessor claims to have published data belonging to schnabel-eng.com on their leak site.
- Published
- 2 min read
- 2 min read
- Ransomware group: Dispossessor
- Country: United States
- Sector: Professional Services
- Announcement date: April 19, 2024
Dispossessor claims data breach at Schnabel Engineering
The ransomware group known as Dispossessor has claimed to have published data belonging to schnabel-eng.com on their dedicated leak site. This announcement, made by the threat actor, suggests that the professional services firm has been compromised and that their information has been made available for public download.
Details of the alleged claim
According to the announcement posted on the group's leak platform on April 19, 2024, the Dispossessor group alleges that the institution's data was compromised as far back as August 13, 2022. The group has provided a download link, asserting that the organization's data has been published on their site.
Ransomware leak sites are platforms used by cybercriminals to pressure victims into paying ransoms by threatening to release sensitive information. These sites often list victims and provide links to stolen data to increase the pressure on the targeted organization. In many cases, these groups utilize a method known as double extortion. In a double extortion scheme, attackers do not just encrypt an organization's files to disrupt operations; they also steal sensitive data before encryption. This allows them to threaten the victim with the public release of their information if the ransom is not paid, creating a second layer of leverage.
Information regarding the leaked data
Regarding the specific contents of the breach, there is no detailed information regarding the nature of the leaked or threatened data in the provided record or screenshot. The listing names no specific data types.
About Schnabel Engineering
Schnabel Engineering is an American engineering firm specializing in geotechnical and structural engineering services for infrastructure projects. Their work covers a wide range of critical sectors, including dams, transportation, energy, and water resources.
Analysis and potential impact
The Dispossessor group is a threat actor that emerged in late 2023. The group has been noted for interfering with US law enforcement infrastructure in August 2024. Such leaks may impact the institution's operational continuity and lead to reputational damage. If the leaked data includes employee or customer information, it could pose a risk for identity theft and targeted phishing attacks.
Depending on the region where the institution operates, legal processes under data protection regulations may be triggered. When organizations face such threats, common defensive steps often include implementing robust multi-factor authentication, maintaining offline backups, and conducting regular security awareness training to prevent phishing. Furthermore, monitoring for unauthorized data exfiltration and ensuring all software is patched are critical components of a modern cybersecurity posture.
Given the group's past activities, the use of double extortion methods may be a possibility in this instance. The long gap between the alleged compromise date in 2022 and the announcement in 2024 highlights the challenges organizations face in detecting long-term unauthorized access within their networks.