Flocker claims data breach involving SBC Global, Bitfinex, Coinmama, and Rutgers University

• Ransomware group: Flocker
• Sector: Education
• Announcement date: May 7, 2024

Flocker announces leak of data from multiple organizations

The ransomware group known as Flocker has announced that it has leaked data allegedly belonging to several prominent entities, including SBC Global, Bitfinex, Coinmama, and Rutgers University. According to the announcement made on the group's leak site, the data has been made publicly available to the public through provided file-sharing links.

Ransomware attacks often involve a tactic known as double extortion. In these scenarios, threat actors do not merely encrypt an organization's files to disrupt operations; they also exfiltrate sensitive information. The attackers then threaten to release this stolen data on public leak sites if a ransom demand is not met. This pressure tactic aims to exploit the reputational and regulatory risks associated with a public data exposure.

The claims made by Flocker

The threat actor known as Flocker claims to have leaked personal data associated with the mentioned institutions. The group alleges that these organizations refused to pay a ransom demand, leading to the decision to release the information. The announcement was posted on May 7, 2024, while the incident itself was cited as occurring on May 5, 2024.

The group asserts that the information has been uploaded to the Mega.nz platform. Screenshots provided by the group show numerous file links hosted on this platform, suggesting a significant volume of data has been distributed. While the group's claims are central to the announcement, information regarding the Flocker group itself remains limited.

Data types involved in the alleged breach

According to the announcement, the leaked data contains sensitive information belonging to both clients and employees of the affected organizations. The specific types of data mentioned in the leak include:

• Personal data
• Financial records

The exposure of such information can have significant implications for the individuals involved. When personal and financial details are leaked, it often leads to secondary risks, such as the use of that information in targeted phishing campaigns designed to deceive victims.

Potential impact and organizational considerations

This incident may increase the risk of identity theft and fraud for the customers and employees of the institutions involved. Beyond the immediate threat to individuals, such breaches can lead to regulatory consequences under applicable data protection laws, such as GDPR or other regional regulations. The legal and compliance implications of a data leak can be extensive for any organization operating in regulated sectors.

For organizations facing such threats, common defensive steps include implementing robust security protocols and conducting regular reviews of their digital infrastructure. It is often advisable for affected institutions to notify the impacted parties regarding the potential compromise of their information. Maintaining a strong security posture involves continuous monitoring and the ability to respond rapidly to unauthorized access attempts to mitigate the impact of potential exfiltration.