Hull Property Group listed on ALPHV ransomware leak site

• Ransomware group: ALPHV
• Country: United States
• Sector: Retail & E-Commerce
• Announcement date: July 26, 2023

The ALPHV ransomware group has listed Hull Property Group on its leak site, claiming to have obtained company data. This announcement, made on July 26, 2023, suggests that the organization has been targeted in a data breach operation.

The alleged attack and claims by ALPHV

The ALPHV (also known as BlackCat) group has listed Hull Property Group on its leak site, alleging that data belonging to the organization has been compromised. According to the group's claims, the breach occurred around April 5, 2023. The group has provided a screenshot as evidence of their claims, which indicates that a significant amount of data was uploaded on March 20, 2023.

Ransomware groups often utilize leak sites as a tool for double extortion. In this model, attackers do not only encrypt an organization's systems to disrupt operations but also steal sensitive information to threaten its public release. This pressure is designed to coerce the victim into paying a ransom to prevent the exposure of confidential data. By listing a company on a public leak site, the threat actors aim to maximize the visibility of the breach and increase the pressure on the target organization.

Data involved in the leak

The group's announcement and the accompanying screenshot claim that a substantial volume of data, totaling 343 GB, has been exfiltrated. The group specifically claims that the stolen information includes the following:

• Management email correspondence

The inclusion of personal email correspondence belonging to the management suggests a high level of access was achieved by the attackers during the intrusion.

Hull Property Group profile

Hull Property Group is a privately owned retail real estate company based in the United States. The firm specializes in the development and management of shopping centers. Founded in 1977, the company focuses on the transformation and operation of retail properties.

Implications and organizational risks

The alleged leak may pose a risk of exposure for the personal data of the company's management. Because the organization is a US-based entity, any potential data breach could be subject to state-level privacy laws and regulations. The exposure of sensitive emails might facilitate targeted phishing attacks against company employees or executives, as attackers can use the context of private communications to craft highly convincing social engineering attempts.

The ALPHV group utilizes a Rust-based Ransomware-as-a-Service (RaaS) model, which has previously been associated with significant impacts on corporate networks. The complexity of the Rust programming language can make it more difficult for security analysts to reverse-engineer the malware, potentially increasing the effectiveness of the attack.

For organizations in the retail and real estate sectors, such incidents can lead to potential negative consequences for business operations and reputation management. To defend against such threats, organizations typically implement multi-layered security strategies. These include robust identity and access management to protect sensitive accounts, continuous monitoring of network traffic to detect unauthorized data exfiltration, and comprehensive employee training to recognize phishing attempts. Furthermore, maintaining strict data governance and following regulatory compliance frameworks can help mitigate the impact of potential leaks and ensure that privacy laws are respected.