myshoes.bg listed on Ransomed ransomware leak site

• Ransomware group: Ransomed
• Country: Bulgaria
• Sector: Retail & E-Commerce
• Announcement date: September 26, 2023

The retail and e-commerce platform myshoes.bg has been listed on a ransomware leak site by the Ransomed group. This announcement, published on September 26, 2023, indicates a potential data breach involving the Bulgarian-based organization.

The details of the claim

The Ransomed group has published a leak announcement claiming to have compromised data belonging to myshoes.bg. According to the threat actor, the attack took place on September 25, 2023. The group has issued a ransom demand of $15,000, stating that if this amount is not paid, they will proceed to leak all the information currently in their possession.

This type of tactic is a hallmark of double extortion ransomware attacks. In these scenarios, threat actors do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive data. The goal is to use the threat of public data exposure as leverage to coerce the victim into paying the ransom. By threatening to release information on a public leak site, attackers aim to maximize the pressure on the target organization through the threat of reputational damage and regulatory scrutiny.

Information regarding the alleged stolen data

No detailed information regarding the nature of the alleged stolen data has been provided by the group. Furthermore, there is no screenshot available to verify the contents of the breach. The listing names no specific data types.

About myshoes.bg

MyShoes is a footwear and accessories retailer based in Bulgaria. The company offers various brands of footwear products to consumers through its physical stores and online platform.

Potential impact and organizational risks

This incident may pose a potential risk to the institution's customer data and commercial information. Failure to meet the ransom demand could lead to the public disclosure of data, potentially resulting in reputational damage and a loss of customer trust. Because the organization operates in Bulgaria, any confirmed data breach may trigger legal sanctions and administrative fines under the GDPR (EU General Data Protection Regulation). Furthermore, the leaked data could potentially be utilized for identity theft or targeted phishing attacks.

For organizations operating in the retail and e-commerce sectors, such incidents highlight the critical importance of robust cybersecurity frameworks. Defensive strategies typically involve implementing multi-factor authentication (MFA) across all access points, maintaining rigorous patch management schedules to close vulnerabilities, and conducting regular offline backups to ensure data integrity. Additionally, monitoring for unauthorized data exfiltration and implementing strict access controls can help mitigate the impact of such threats. Information about the Ransomed group remains limited.