Exela Technologies targeted by Hunters ransomware group

• Ransomware group: Hunters
• Country: United States
• Sector: Technology
• Announcement date: March 28, 2024

Hunters ransomware group claims data exfiltration at Exela Technologies

The Hunters International ransomware group has published an entry on its dedicated leak site claiming to have exfiltrated data belonging to Exela Technologies. According to the announcement made on March 28, 2024, the threat actor group asserts that they have gained access to sensitive information belonging to the organization. Notably, the group stated that while data was exfiltrated, the organization's systems were not encrypted during this specific incident.

In modern cyberattack methodologies, this approach is often associated with double extortion tactics. In such scenarios, threat actors focus on stealing sensitive information rather than just locking systems. By threatening to leak the stolen data on public forums or leak sites, attackers aim to exert maximum pressure on the victim organization to meet their demands. This method bypasses the traditional reliance on system availability and instead targets the confidentiality and privacy of the organization's data assets.

Details of the alleged data breach

The announcement by the Hunters International group indicates that the stolen data allegedly originates from various departments within Exela Technologies. While the group has not provided specific details regarding the total volume of data or the exact file count, they have shared screenshots to support their claims. These visual proofs suggest that the leaked information is organized into several specific categories.

Based on the information provided by the group, the categories of data identified in the screenshots include:

• Customer data
• Accounting records
• Confidential documents
• Contracts

The presence of specific labels such as 'Exela Tech', 'Customers', 'Accounting', 'Confidential Documents', and 'FBI Contract' in the group's screenshots highlights the potential breadth of the breach across different functional areas of the company.

About Exela Technologies

Exela Technologies is a global technology company that provides business process automation and digital transformation solutions. The organization offers a wide range of software and services designed to increase operational efficiency across various sectors. Their service portfolio is utilized by diverse industries, including finance, healthcare, and retail, to streamline complex business processes through digital means.

Implications and potential risks

This incident suggests that sensitive corporate and customer data within Exela Technologies may be at risk of exposure. Because the organization is based in the United States, the event may have significant implications regarding state-level data privacy regulations and federal compliance requirements. The leakage of such sensitive information can trigger secondary risks for the organization's clients and partners, such as identity theft or targeted phishing attacks.

When an organization handles data for sectors like finance and healthcare, the stakes for data privacy are particularly high due to the nature of the information involved. For companies in the technology and automation sector, maintaining the integrity and confidentiality of client data is a cornerstone of operational trust. A breach of this nature can lead to long-term reputational damage and complex legal challenges depending on the regulatory landscape of the jurisdictions in which they operate.

Given the past activities of the Hunters International group, it is anticipated that the group may maintain a persistent approach regarding the publication of the exfiltrated data. This persistence is a common trait among sophisticated ransomware groups, who may release data in stages to increase pressure on the victim. Organizations facing similar threats are generally encouraged to implement robust data loss prevention (DLP) strategies, enhance monitoring of data egress, and ensure strict access controls to mitigate the risk of unauthorized exfiltration.