Informist Media listed on raworld leak site

• Ransomware group: raworld
• Country: India
• Sector: Technology
• Announcement date: March 21, 2024

The threat actor known as raworld has listed the Indian organization Informist Media on its leak site. According to the claims made by the group, a significant amount of data belonging to the company has been compromised.

The claims made by raworld

The raworld group has officially listed data allegedly belonging to Informist Media on their dedicated leak site. The threat actor claims that the organization possesses a data set totaling 40 GB in size. Based on the announcement, it has been observed that a specific schedule has been established for the publication of the data.

In many modern cyberattacks, threat actors utilize leak sites to exert pressure on their victims. This tactic is often part of a double extortion strategy, where attackers not only encrypt an organization's systems to disrupt operations but also threaten to release sensitive information publicly if a ransom is not met. By establishing a publication schedule, attackers create a sense of urgency and psychological pressure on the target organization.

The alleged leaked data

According to the screenshots provided by the threat actor, the data allegedly leaked includes several types of sensitive information. The specific items mentioned in the listing include:

• Orders database
• Legal documents
• Financial data

The exposure of such diverse data types—ranging from transactional records to legal documentation—represents a significant breach of information security. When databases containing orders and financial records are compromised, it often indicates that the attackers have gained access to core business systems.

About Informist Media

Informist Media is an India-based financial news and data analytics company. It provides real-time news and data services focusing on India's financial markets, economy, and policy.

Impact and assessment of the incident

This incident may bring about the risk of exposure for sensitive corporate and financial information within Informist Media. The content of the alleged data could negatively impact the organization's operational continuity and customer trust. Furthermore, the leakage of financial data and legal documents may lead the organization to face obligations under relevant data protection regulations in India.

Beyond the immediate corporate impact, the publication of such data could create secondary risks for employees and customers, such as identity theft or targeted phishing attacks. When financial and personal information is leaked, it often becomes a commodity for other criminals who use it to conduct highly convincing social engineering campaigns.

For organizations operating in the technology and financial data sectors, maintaining robust security postures is critical. Common defensive steps for organizations to mitigate such risks include implementing multi-factor authentication (MFA), maintaining strict access controls, and ensuring regular, offline backups are available. Additionally, continuous monitoring of network traffic and employee security awareness training are essential components of a modern defense-in-depth strategy. Information about the raworld group remains limited in the public domain.