DiVal Safety Equipment, Inc. targeted by Hunters ransomware group

• Ransomware group: Hunters
• Country: United States
• Sector: Professional Services
• Announcement date: March 4, 2024

Hunters ransomware group claims attack on DiVal Safety Equipment, Inc.

The threat actor known as Hunters has listed DiVal Safety Equipment, Inc. on its dedicated leak site. According to the claims made by the group, the organization has been targeted in a cyberattack involving both data exfiltration and system encryption. This announcement, which appeared on March 4, 2024, marks a significant escalation in the threat landscape for the targeted entity.

Details of the claimed attack

The Hunters ransomware group alleges that they have successfully breached the networks of DiVal Safety Equipment, Inc. The group claims to have exfiltrated sensitive data from the organization's infrastructure and subsequently encrypted their systems. Such tactics are characteristic of modern ransomware operations, where the goal is to maximize leverage over the victim through the threat of public data exposure.

While the group has made these claims on their leak site, it is important to note that the provided evidence, specifically the screenshot associated with the listing, does not contain any actual data samples. The group's announcement serves as a claim of responsibility and a notification of the breach, but it does not provide immediate proof of the stolen content.

Data and impact assessment

Regarding the specifics of the breach, the nature of the leaked data has not been explicitly specified by the attackers. The screenshot provided by the group displays an error page rather than any identifiable files or sensitive information. Consequently, the listing names no specific data types that have been compromised.

The lack of information regarding the volume of data, the specific file count, or the exact nature of the stolen information makes it difficult to assess the immediate scope of the breach. Furthermore, no ransom demand has been publicly identified in the current announcement.

About DiVal Safety Equipment, Inc.

DiVal Safety Equipment, Inc. is an American company operating within the professional services sector. The organization specializes in providing industrial safety equipment, personal protective equipment (PPE), and various workplace safety solutions. Their business model involves supplying safety products and providing technical support services to a wide range of industries.

Potential risks and organizational implications

This incident may lead to significant disruptions in the organization's operational continuity and the potential exposure of sensitive information. Because the organization is based in the United States, the breach may trigger legal obligations under state-level data breach notification laws and other relevant regulatory requirements. The potential impact extends beyond immediate operational downtime.

Secondary risks associated with such an event include the potential use of leaked data in identity theft or targeted phishing campaigns. When sensitive information is exfiltrated, threat actors often use it to craft highly convincing social engineering attacks against employees or clients. This type of double-extortion tactic—where data is both encrypted for operational disruption and stolen for extortion—is a known method used by the Hunters International group. This group is recognized for utilizing the Hive ransomware codebase.

For organizations in the professional services and industrial safety sectors, maintaining robust cybersecurity postures is essential. This includes implementing strict access controls, regular backups, and continuous monitoring to detect unauthorized exfiltration. As ransomware groups continue to evolve, organizations must prepare for the possibility of both operational disruption and the long-term risks associated with data exposure.