Drizly.com listed on apt73 leak site following alleged data breach

• Ransomware group: apt73
• Country: United States
• Sector: Professional Services
• Announcement date: October 24, 2024

A claim of data theft against drizly.com

The threat actor known as apt73 has officially listed drizly.com on its leak site, claiming to have successfully exfiltrated a significant amount of data from the organization. This announcement, published on October 24, 2024, suggests a targeted operation against the e-commerce platform. While the listing serves as a public claim by the threat actor, the details regarding the specific methods used to access the environment remain undisclosed.

According to the announcement made by apt73, the alleged attack occurred on October 17, 2024. The group claims to have obtained a database consisting of 2,479,145 lines of information. At this stage, information regarding the specific identity, motives, or operational capacity of the apt73 group remains limited, as there is very little publicly available data concerning this specific threat actor.

Details of the alleged data exposure

The claims made by apt73 suggest that the stolen information is tied directly to the users of the platform. Although the group did not provide any screenshots to verify the authenticity of the stolen files, the announcement specifies the types of data that are allegedly contained within the leaked dataset. The information mentioned in the leak claim includes:

• User dates of birth
• Device information

The absence of a provided ransom demand or a specific file size in the announcement leaves several questions regarding the scale and the ultimate goal of the group's actions. In many modern cyberattacks, particularly those involving ransomware groups, a tactic known as double extortion is frequently employed. In such scenarios, attackers not only encrypt an organization's systems but also steal sensitive data to pressure the victim into paying a ransom by threatening to leak the information publicly.

About drizly.com

Drizly.com is an e-commerce platform that facilitates the online ordering of alcoholic beverages. The service allows users to purchase items through the platform for delivery via local retailers. The company, which operates within the alcohol delivery sector, was acquired by Uber.

Potential impact and security considerations

If the claims made by apt73 are verified, this alleged leak could significantly increase the risk of identity theft and targeted phishing attacks for the affected users. The exposure of personal details such as dates of birth provides malicious actors with the necessary components to conduct more convincing social engineering campaigns or to impersonate users in various fraudulent activities.

Because the organization is based in the United States, a confirmed data breach of this nature could trigger complex legal processes. Such processes are often governed by state-level data protection laws and oversight by various regulatory bodies. Beyond the legal implications, such an incident can have a profound negative impact on customer trust and may lead to secondary extortion attempts against the company.

For organizations and users facing similar risks, security experts generally recommend several defensive measures. Users who suspect their data may have been compromised should prioritize changing their passwords and implementing multi-factor authentication (MFA) to secure their accounts. For the organization, maintaining robust data protection protocols and monitoring for unauthorized access is essential to mitigating the impact of such threats.