Mogilevich ransomware group lists BAZAARVOICE.COM on its leak site

• Ransomware group: Mogilevich
• Country: United States
• Sector: Technology
• Announcement date: February 26, 2024

Mogilevich group claims compromise of Bazaarvoice servers

The Mogilevich ransomware group has announced that it has successfully compromised the servers belonging to BAZAARVOICE.COM. According to the announcement made on a leak site, the threat actor claims to have gained unauthorized access to the organization's infrastructure. The group alleges that the breach resulted in the theft of approximately 30 GB of data, which they have reportedly offered for sale on the dark web.

In this instance, the threat actor has set a deadline of February 3, 2024, regarding the stolen information. While the group has made these claims publicly, it is important to note that public information regarding the specific activities and identity of the Mogilevich group remains limited. This type of announcement is a common tactic used in double extortion schemes, where attackers not only encrypt an organization's systems but also threaten to leak sensitive information to pressure the victim into paying a ransom.

Alleged data contents and affected information

The information allegedly stolen during this incident includes various types of sensitive data. While the group has not provided any screenshots to verify the legitimacy of the stolen files, they claim the following data types are included in the breach:

• First names
• Last names
• Company names
• Business email addresses
• Passwords

The exposure of such information, particularly passwords and business email addresses, presents significant security risks. When credentials are leaked, they can be used by malicious actors to conduct secondary attacks against the organization or to attempt unauthorized access to other interconnected systems. Furthermore, the presence of names and email addresses often facilitates highly targeted phishing campaigns, where attackers use specific details to gain the trust of the intended victims.

About Bazaarvoice

Bazaarvoice is a technology company that operates as a consumer content and commerce platform. The organization specializes in helping various brands manage customer reviews, ratings, and user-generated content. Additionally, the company provides a range of marketing tools and social commerce solutions designed specifically for e-commerce websites to enhance their digital presence and customer engagement.

Potential risks and organizational implications

If the claims made by the Mogilevich group are verified, the breach could pose substantial risks to both the company's employees and its customers. Specifically, the exposure of personal details and credentials increases the likelihood of identity theft and targeted phishing attacks. For a technology company handling consumer content, the integrity of the data is paramount to maintaining trust with business partners and end-users.

From a regulatory perspective, since the company is based in the United States, any confirmed data breach may fall under the jurisdiction of various state-level privacy laws as well as federal regulations. These legal frameworks often dictate how organizations must report breaches and the level of protection they must provide to affected individuals.

In response to such incidents, organizations typically undergo a rigorous review of their data security processes. Common defensive steps and recovery measures include implementing mandatory password resets for all affected accounts to mitigate the risk of secondary attacks. Organizations in the technology and e-commerce sectors often focus on strengthening their access controls, enhancing monitoring capabilities, and ensuring that sensitive data is encrypted both at rest and in transit to prevent unauthorized access in the future.