Longhorn Investments listed on ALPHV ransomware leak site

• Ransomware group: ALPHV
• Country: United States
• Sector: Financial Services
• Announcement date: July 26, 2023

The ALPHV ransomware group has listed Longhorn Investments on its dedicated leak site, claiming to have successfully compromised the institution. According to the announcement, the threat actor group asserts that they have obtained a significant volume of data belonging to the organization, which is now allegedly available for download on their platform.

Details of the alleged attack

The announcement regarding Longhorn Investments was discovered on July 26, 2023. While the leak was publicized in mid-2023, the group cites the actual attack date as October 17, 2022. This discrepancy between the time of the initial breach and the public listing is a common occurrence in ransomware operations, where attackers may hold data for extended periods before deciding to publish it on a leak site.

The ALPHV group, also known as BlackCat, is a sophisticated threat actor known for utilizing Rust-based malware. This group is notorious for employing double-extortion tactics. In a double-extortion scheme, attackers do not merely encrypt an organization's systems to demand a ransom for decryption; they also exfiltrate sensitive data and threaten to leak it publicly unless a ransom is paid. This method increases the pressure on the victim, as the threat of data exposure remains even if the organization can restore its systems from backups.

Data involved in the claim

Regarding the specific contents of the breach, there is no detailed information available concerning the exact nature or types of the leaked data. The group has not specified the file types or the specific categories of information that were compromised. However, the group claims to have released a total of 1 TB of data.

• 1 TB of claimed data

About Longhorn Investments

Longhorn Investments is an investment and asset management firm based in the United States. The organization focuses its business operations on real estate and various financial portfolios.

Potential risks and industry implications

A data breach at a financial services institution carries significant secondary risks. The exposure of sensitive information can lead to identity theft and the compromise of customer information. Furthermore, such incidents can result in substantial reputational damage and may lead to legal sanctions under relevant data protection regulations.

For organizations operating within the financial sector, these types of breaches can create negative impacts across the entire supply chain. Such leaks can also be leveraged by attackers to facilitate highly targeted phishing attacks against the institution or its clients. To defend against these threats, organizations typically focus on robust data protection strategies, continuous monitoring, and incident response planning to mitigate the impact of exfiltration-based attacks.