Ono Academic College targeted by malekteam in alleged data breach

• Ransomware group: malekteam
• Country: Israel
• Sector: Education
• Announcement date: December 24, 2023

Malekteam claims to have exfiltrated data from Ono Academic College

The malekteam ransomware group has announced that it has conducted a cyberattack against Ono Academic College. According to the group's claims, the breach has resulted in the exposure of over 130,000 personal records. This announcement was made via the group's leak site on December 24, 2023.

The group alleges that they successfully gained access to the internal systems of the educational institution and subsequently obtained a significant amount of the organization's data. To support their claims, the attackers published several screenshots on their leak site. These shared images purportedly show that the group is in possession of various sensitive materials, including identity documents, databases, and CCTV footage.

In many modern cyberattacks, threat actors utilize a tactic known as double extortion. In these scenarios, attackers do not merely encrypt an organization's files to demand a ransom for decryption; they also steal sensitive information to threaten the public release of that data. This pressure is intended to coerce the victim into paying the ransom to prevent the exposure of confidential information, which can lead to severe legal and reputational consequences.

The alleged data involved in the breach

The information claimed to be stolen by the malekteam group is extensive and covers a wide range of sensitive personal and institutional data. Based on the group's claims, the following types of data have been compromised:

• First and last names
• Email addresses
• Phone numbers
• Home numbers
• Passwords
• Identity documents
• CCTV recordings
• Accounting documents

The exposure of such a diverse dataset, ranging from personal identifiers to internal financial and surveillance records, represents a significant security incident for the institution involved.

About Ono Academic College

Ono Academic College is a private higher education institution located in Israel. The college offers a variety of undergraduate and graduate programs to its students. Its academic curriculum provides specialized education in several professional fields, including law, business, and health sciences.

Potential implications and industry risks

This alleged breach poses significant risks to the individuals associated with the institution. The exposure of sensitive personal data, such as identity documents and passwords, may increase the risk of identity theft and fraud for both students and staff members. Furthermore, the leakage of such information can be utilized by other threat actors in targeted phishing campaigns, where attackers use stolen details to appear legitimate and trick victims into revealing even more sensitive information.

For organizations operating within the education sector, such incidents can trigger complex legal proceedings under regional data protection regulations, such as those in Israel. Beyond the legal ramifications, the institution may face substantial reputational damage resulting from the loss of trust by its student body and faculty.

While information regarding the specific methods and identity of the malekteam group remains limited, it is a known risk that vulnerabilities identified in one institution's systems can be exploited by various threat actors. Organizations can defend against such threats by implementing robust security frameworks, such as multi-factor authentication, regular system patching, and continuous monitoring of network traffic to detect unauthorized access early.

In the broader context of cybersecurity, the targeting of educational institutions is a growing trend. These organizations often hold vast amounts of sensitive personal, financial, and research data, making them attractive targets for cybercriminals seeking to maximize their leverage during extortion attempts.