Equaldex data claimed by Meow ransomware group

• Ransomware group: Meow
• Sector: Technology
• Announcement date: November 24, 2023

The threat actor known as Meow has published an announcement on its leak site, claiming to have obtained data belonging to the Equaldex platform. This development follows a pattern often seen in modern cyberattacks where threat actors use public leak sites to pressure organizations by claiming responsibility for data exfiltration.

The details of the claim

The Meow group initiated its leak announcement on November 9, 2023, asserting that it had successfully obtained data from Equaldex. In an attempt to validate the legitimacy of their claims, the threat actor shared various pieces of information attributed to the organization's representative, including specific contact details. The group concluded its public announcement by providing a download link and an archive password intended for accessing the alleged data.

In many such incidents, ransomware groups employ a strategy known as double extortion. In this model, attackers do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive information before the encryption phase. The threat actor then threatens to release this stolen data on a public leak site if their demands are not met. This tactic increases the pressure on the victim, as the exposure of sensitive data can lead to significant reputational damage, legal liabilities, and loss of trust from users.

Data involved in the incident

The announcement provided by the group contains specific information that they claim is linked to the organization's representative. According to the leak site post, the following types of information have been affected:

• Email addresses
• Phone numbers

In addition to these contact details, the threat actor shared a download link for what is claimed to be a database file. No information was provided regarding the total size of the data or the specific number of files contained within the archive. Furthermore, no information was provided regarding a ransom demand or the specific amount requested by the group.

About Equaldex

Equaldex is a collaborative knowledge platform designed to collect and visualize data regarding LGBTQ+ rights and laws on a global scale. It functions as a comprehensive database that provides comparative information concerning the legal status of LGBTQ+ individuals across various different countries.

Risk assessment and organizational defense

This incident may pose a significant risk of exposing the personal data of Equaldex users. The sharing of contact information, such as email addresses and phone numbers, could lead to the individuals involved being targeted by phishing attempts or other forms of malicious attacks. Furthermore, the claim that the database may contain information regarding individuals under the age of 13 could create serious compliance issues regarding international data protection regulations.

Information regarding the Meow group remains limited, and their specific motivations and methods of operation remain uncertain. For organizations operating in the technology sector, such incidents highlight the necessity of robust defensive measures. To mitigate the risks associated with data exfiltration, organizations often implement several security layers:

• Data Loss Prevention (DLP): Implementing tools that monitor and block the unauthorized transfer of sensitive information outside the corporate network.
• Multi-Factor Authentication (MFA): Using MFA across all services to prevent unauthorized access via stolen credentials.
• Endpoint Detection and Response (EDR): Monitoring systems for suspicious activities that might indicate an attacker is moving through the network or preparing for exfiltration.
• Regular Audits: Conducting frequent security audits and vulnerability assessments to identify and patch weaknesses before they can be exploited.

As seen in this case, the potential for regulatory scrutiny is high when sensitive demographics are involved, making data minimization and strict access controls essential for maintaining compliance and protecting user privacy.