Everest ransomware group targets Studio notarile Bucci – Olmi

• Ransomware group: Everest
• Country: Italy
• Sector: Professional Services
• Announcement date: July 17, 2024

Everest ransomware group claims data breach at Studio notarile Bucci – Olmi

The Everest ransomware group has listed the Italian notary office, Studio notarile Bucci – Olmi, on its dedicated leak site. According to the announcement made on July 17, 2024, the threat actor group claims to have successfully exfiltrated a significant amount of data from the organization's network.

The group alleges that they have obtained approximately 400 GB of data belonging to the firm. Following the listing, the Everest group issued a demand for the organization to contact them within a three-day window. While the group has claimed responsibility for the breach, the specific details regarding any ransom demands have not been disclosed in the public announcement.

Details of the alleged data exfiltration

The claims made by the Everest group suggest a massive breach involving highly sensitive documentation. Based on the information provided by the attackers, the stolen data includes various forms of identification and official documentation. The group has shared screenshots as evidence, which purportedly show a variety of sensitive documents related to notarial transactions.

The types of information allegedly compromised include:

• Identity information
• Health records
• Tax records
• Driver's license information

The presence of such documentation in the hands of a ransomware group is a hallmark of double extortion tactics. In these scenarios, attackers do not merely encrypt a victim's systems to disrupt operations; they also steal sensitive data to use as leverage. By threatening to leak private information, the attackers aim to pressure the organization into paying a ransom to prevent the public disclosure of the stolen files.

About Studio notarile Bucci – Olmi

Studio notarile Bucci – Olmi is a professional services firm operating as a notary office located in Milan, Italy. The firm is responsible for handling essential legal and administrative tasks, providing specialized notarial services to its clients. Their professional scope includes critical areas such as real estate transactions, corporate law, and inheritance law.

Given the nature of their work, the firm handles a vast array of sensitive legal documents and personal information required for the execution of these legal processes. This makes such organizations prime targets for cybercriminals looking to acquire high-value data that can be used for further malicious activities.

Potential impact and security considerations

The alleged leak of 400 GB of data poses a severe risk to the organization's clients. The exposure of identity cards, health cards, and tax documents could provide malicious actors with the necessary tools to conduct identity theft or launch highly targeted phishing attacks against the individuals involved. Furthermore, because the organization is based in Italy, this incident may involve significant data protection violations under the General Data Protection Regulation (GDPR).

The Everest group, which has been active since 2020, is known for its focus on data exfiltration and extortion. Such attacks can have lasting negative impacts on an organization's operational continuity and its professional reputation. For professional services firms, the loss of client trust following a data breach can be devastating.

To defend against such threats, organizations in the professional services sector typically focus on robust security frameworks. This includes implementing strict access controls, maintaining comprehensive logging to detect unauthorized data movement, and ensuring that all sensitive client data is encrypted both at rest and in transit. Regular security audits and employee training regarding phishing and social engineering are also vital components of a modern defensive posture.