Finger Beton Unternehmensgruppe targeted by Meow ransomware group

• Ransomware group: Meow
• Country: Germany
• Sector: Professional Services
• Announcement date: November 9, 2024

Meow ransomware group claims data breach at Finger Beton Unternehmensgruppe

The threat actor known as Meow has listed data allegedly belonging to Finger Beton Unternehmensgruppe on its leak site. According to the announcement made on November 9, 2024, the group claims to have exfiltrated a significant volume of information from the German organization. This incident follows a common pattern in modern cyberattacks where threat actors utilize leak sites to pressure victims through the threat of public data exposure.

Details of the claimed attack

The Meow ransomware group claims that the stolen data set is 350 GB in size and contains comprehensive information regarding the operations of Finger Beton Unternehmensgruppe. The threat actor officially listed the data on their leak site on November 9, 2024, which matches the date of the claimed attack. In line with the double extortion tactics often employed by ransomware groups, the attackers are demanding a ransom for the data.

The group has specified two different pricing tiers for the stolen information. They are demanding a ransom of $25,000 for a single buyer. Alternatively, they have offered the data to multiple buyers for a price of $12,000. Such pricing structures are designed to maximize profit by targeting different types of threat actors or data brokers.

Scope of the allegedly leaked data

The data allegedly leaked by the Meow group is highly sensitive, encompassing both corporate and highly personal information. According to the group's claims, the dataset includes various types of documentation that could pose significant risks to the individuals and the company involved. The following items are reportedly included in the breach:

• Employee identification data
• Passports
• Birth certificates
• Disability certifications
• Health records
• Pension documentation
• Client contact details
• Project agreements
• Commercial contracts
• Invoices
• Bank statements
• Tax audit reports
• Legal compliance notifications

The presence of these specific documents, which include personal identification and financial records, suggests a deep level of access to the organization's internal systems. Examples of these documents were reportedly visible in screenshots provided by the threat actor.

About Finger Beton Unternehmensgruppe

Finger Beton Unternehmensgruppe is a long-established German company specializing in the production of precast concrete components for civil and industrial construction. The company provides products such as concrete pipes, shaft systems, and customized structural elements. To support its operations, the company operates through eight production facilities located across Germany.

Potential impact and organizational risks

This incident suggests that the personal data of Finger Beton Unternehmensgruppe employees and clients may be at risk of exposure. Because the company is based in Germany, the confirmation of such a leak could lead to administrative sanctions and legal proceedings under the General Data Protection Regulation (GDPR). The presence of sensitive health and financial data may increase the likelihood of affected individuals being targeted for identity theft and phishing attacks.

Furthermore, the publication of corporate trade secrets and internal correspondence could lead to reputational damage and operational disruptions for the company. While the public information about the Meow group is limited and their specific methods remain uncertain, the potential consequences for the victim organization are multifaceted. In the professional services and industrial sectors, maintaining data integrity and confidentiality is vital for operational continuity and client trust.

In general, organizations facing such threats often focus on defensive measures such as implementing robust multi-factor authentication, maintaining regular offline backups, and conducting regular security awareness training to mitigate the risk of initial access. As seen in this case, the exposure of sensitive documentation can create long-term liabilities that extend far beyond the initial encryption of systems.