Fullington Trailways listed on dragonforce ransomware leak site

• Ransomware group: dragonforce
• Country: United States
• Sector: Transportation
• Announcement date: April 15, 2024

Fullington Trailways targeted by dragonforce ransomware group

Fullington Trailways has been listed on the leak site of the ransomware group known as dragonforce. According to an announcement made by the threat actor, the organization has been the victim of a cyberattack involving data exfiltration.

Details of the alleged attack

The dragonforce group published an announcement on April 15, 2024, claiming that data belonging to Fullington Trailways has been leaked. The group alleges that it has successfully gained access to the organization's networks and has exfiltrated data from their systems.

Publicly available information regarding the dragonforce group remains limited. Reports indicate that this group operates using a specific business model, where they provide the necessary infrastructure and branding to various affiliates to carry out attacks. This model allows the group to expand its reach by enabling other actors to use their established identity and technical resources.

Information regarding the leaked data

At this time, no information or screenshots regarding the nature of the allegedly leaked data have been provided by the threat actor. The listing does not specify the types of files or the volume of information that was targeted during the incident.

About Fullington Trailways

Fullington Auto Bus Co. Inc. is a transportation services company based in Pennsylvania. The organization provides a variety of transit solutions, including intercity bus services, school bus contracting, limousine services, and VIP transportation solutions.

Potential impact and security implications

This situation may create a negative impact on the organization's operational continuity. Depending on the content of the leaked data, the exposure of employee or customer personal information could lead to secondary risks such as identity theft and targeted phishing attacks. As a US-based organization, legal processes may be triggered under relevant state laws and data protection regulations.

Furthermore, the use of double extortion methods by ransomware groups may result in reputational damage for the organization. Double extortion is a tactic where attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information to threaten its public release if a ransom is not paid. This dual pressure aims to maximize the likelihood of payment by targeting the victim's reputation and legal standing.

In response to such incidents, organizations often find themselves needing to fulfill data breach notification obligations and review their security measures. Maintaining robust security protocols is essential for protecting against unauthorized network access and preventing the exfiltration of sensitive corporate and personal information.