New Century Advisors, LLC listed on 8base ransomware leak site

• Ransomware group: 8base
• Country: United States
• Sector: Financial Services
• Announcement date: July 7, 2023

8base claims New Century Advisors, LLC data breach

The ransomware group known as 8base has officially listed New Century Advisors, LLC on its dedicated leak site. According to the group's announcement, they claim to be in possession of various data sets belonging to the organization. This development follows a pattern often seen in modern cyberattacks where threat actors target high-value entities to exert pressure through public exposure.

The group alleges that the incident escalated after the organization reportedly ceased negotiations with the attackers. Following this breakdown in communication, the group announced on July 14, 2023, that they would begin the process of publishing the stolen information. This tactic is a hallmark of ransomware operations that utilize double-extortion methods, where the threat actor not only encrypts an organization's systems but also threatens to release sensitive data to maximize leverage.

Alleged data types and contents

The information claimed to have been exfiltrated by 8base is extensive and covers multiple sensitive areas of the firm's operations. The group asserts that the stolen data includes a wide range of internal documentation and highly sensitive personal and financial records. The alleged contents of the leak include:

• Internal documents and regulations
• Financial analysis
• Bank statements
• Daily balances
• Personal data of employees
• Passports
• Balance sheets

The inclusion of such diverse data types suggests a deep intrusion into the organization's internal filing systems and financial databases. The presence of identity documents, such as passports, alongside corporate financial records, significantly increases the potential impact of the breach.

About New Century Advisors, LLC

New Century Advisors is an employee-owned financial advisory firm that was founded in 2002. The company provides customized investment strategies and asset management services specifically designed for institutional clients. Their client base is comprised of prestigious entities, including public funds, endowments, healthcare systems, and insurance companies.

Risk assessment and industry implications

This incident may pose a significant risk due to the potential exposure of sensitive data within the financial services sector. The alleged compromise of passports and financial records could lead to secondary risks such as identity theft and fraud for employees and partners. Because the firm's client list includes critical entities like public funds and healthcare systems, this situation may create concerns regarding supply chain security.

As 8base is known for employing double-extortion tactics, the publication of this data could result in reputational damage and potential regulatory scrutiny for the firm. In such scenarios, organizations typically face intense pressure to manage both the technical recovery of their systems and the legal ramifications of data exposure. For companies in the financial sector, maintaining robust security postures is essential to protect the integrity of the financial ecosystem.

While public information regarding the 8base group remains limited, their ability to target specialized advisory firms highlights the ongoing threat posed by ransomware-as-a-service models. Organizations facing similar threats often prioritize comprehensive data encryption, strict access controls, and rigorous employee training to mitigate the risk of unauthorized data exfiltration. The potential for secondary exploitation of stolen identity documents remains one of the most challenging aspects of modern data breaches for both the victims and the individuals whose data has been compromised.