Florists Supply Ltd listed on Noescape ransomware leak site

• Ransomware group: Noescape
• Country: Canada
• Sector: Agriculture and Food Production
• Announcement date: October 24, 2023

Noescape claims data breach at Florists Supply Ltd

The Noescape ransomware group has announced the listing of Florists Supply Ltd on its dedicated leak site. According to the group's announcement, they claim to have successfully targeted the organization and obtained a significant volume of data. This development follows a pattern often seen in modern cyberattacks where threat actors use public platforms to pressure victims into meeting specific demands.

The threat actor known as Noescape has claimed to have gained unauthorized access to the organization's network. By listing the company on their data leak platform, the group is utilizing a tactic common in double extortion ransomware attacks. In these scenarios, attackers do not just encrypt systems to disrupt operations; they also exfiltrate sensitive information to use as leverage, threatening to release it publicly if their requirements are not met.

Details of the alleged data theft

While the specific nature and contents of the leaked data have not been detailed by the group, the scale of the alleged theft is substantial. The group has provided information regarding the volume and structure of the files they claim to have acquired during the intrusion. According to the screenshots provided by the threat actor, the dataset is quite large and consists of a high number of individual files and directories.

The claims regarding the stolen information include the following:

• A total data size of 200 GB
• 193,632 files
• 19,678 folders

It is important to note that the group has not specified the exact categories of information contained within these files. There is no information regarding whether the data includes financial records, internal communications, or other sensitive corporate assets. Furthermore, the group has not issued a specific ransom demand at this time.

About Florists Supply Ltd

Florists Supply Ltd is a wholesaler that operates within the agriculture and food production sector. The company specializes in the distribution of fresh flowers, floral supplies, giftware, and event décor. Their business operations are centered in Western Canada, where they serve a professional client base of florists through various locations, including cities such as Winnipeg and Saskatoon.

Potential risks and organizational impact

This incident may pose significant risks to the organization's operational continuity and data privacy. Depending on the actual content of the allegedly leaked data, there is a possibility that the exposure of employee or customer information may occur. For an organization operating within Canada, such a breach may trigger legal processes under data protection regulations, such as the Personal Information Protection and Electronic Documents Act (PIPEDA).

Beyond the immediate regulatory concerns, such leaks can create secondary risks for both the company and its stakeholders. These risks include the potential for identity theft or the launch of targeted phishing attacks against the individuals whose information may have been compromised. Ransomware groups often use stolen data to conduct highly convincing social engineering campaigns, making it harder for targets to distinguish between legitimate communications and malicious ones.

In general, organizations facing such threats often focus on defensive strategies such as implementing multi-factor authentication, maintaining offline backups, and conducting regular security awareness training. However, for this specific incident, information regarding the Noescape group remains limited. The group's methods and the full extent of their capabilities are not widely documented in public intelligence feeds at this time.