Econocom listed on stormous leak site following claims of data breach

• Ransomware group: stormous
• Country: France
• Sector: Technology
• Announcement date: August 23, 2023

A new data breach claim surfaces against Econocom

The technology firm Econocom has been listed on a leak site by the threat group known as stormous. On August 23, 2023, the group announced a claim of a data leak involving the organization. This announcement marks a significant development in the ongoing threat landscape facing large-scale technology service providers.

Details of the stormous claim

The stormous group officially announced their claim of a data leak against Econocom on August 23, 2023. According to the group, the threat actors have shared several documents related to the company's digital infrastructure on their leak site. The group is identified as an entity that has been active since 2021 and is known to claim political motivations for its actions.

In modern cyberattacks, threat actors often utilize leak sites to pressure organizations. These sites serve as a platform where stolen data is showcased to damage a company's reputation or to demand payment. This method is frequently associated with double extortion tactics, where attackers not only encrypt a company's systems but also threaten to release sensitive information to the public or to specific stakeholders if their demands are not met.

Data and documentation involved in the leak

The screenshots shared by the threat actors contain various types of sensitive documentation. These files appear to include technical service reports, intervention forms, and hardware installation or maintenance logs for various clients, such as Allianz. The documents contain specific information that could be highly sensitive, including:

• Technical service reports
• Client contact information
• Hardware inventory data

Within these documents, specific details such as names, addresses, phone numbers, and technical equipment serial numbers can be observed. The exposure of such granular technical and personal information presents a significant risk to both the organization and its client base.

About Econocom

Econocom is a European technology group that designs, finances, and facilitates the digital transformation of large companies and public organizations. The company specializes in the management of digital assets and technological infrastructure solutions. Given its role in managing critical digital infrastructure and assets for large-scale entities, the security of its data environment is paramount to its operational integrity.

Analysis and potential impact

This leak may affect Econocom's client data and operational processes. The personal data contained within the shared documents could be subject to GDPR regulations and may lead to legal sanctions for the organization. Furthermore, the disclosed technical details could create a basis for secondary attacks or phishing attempts against the company's other clients. Because the stormous group is known for combining data exfiltration with ransom demands, it is assessed that the organization's operational security may be at risk.

When an organization faces such a breach, the consequences often extend beyond the immediate technical disruption. The exposure of hardware serial numbers and service logs can provide attackers with a roadmap of a client's technical environment, facilitating more targeted social engineering or technical exploitation in the future. Organizations in the technology and digital transformation sector often face these risks due to the high volume of client-related technical data they manage.

To mitigate such risks, organizations typically focus on robust data protection strategies. This includes implementing strict access controls, monitoring for unauthorized data exfiltration, and ensuring comprehensive encryption for data at rest and in transit. In the event of a confirmed breach, organizations may need to fulfill their data breach notification obligations and inform the affected parties to comply with regulatory requirements and maintain transparency with their clients.