ourrelentlesschurch.com targeted by Dispossessor ransomware group

• Ransomware group: Dispossessor
• Country: United States
• Sector: Retail & E-Commerce
• Announcement date: April 19, 2024

The ransomware group known as Dispossessor has claimed responsibility for a data breach involving ourrelentlesschurch.com. According to an announcement posted on the group's leak site, the organization's digital assets have been compromised and sensitive information has been exfiltrated.

Details of the claimed attack

The Dispossessor group officially announced the addition of ourrelentlesschurch.com to their target list in a post dated April 19, 2024. Through this announcement, the group alleges that they successfully gained unauthorized access to the institution's digital environment and extracted data from their systems.

While the announcement was made in April 2024, the group provided evidence via screenshots suggesting the breach occurred much earlier. According to the group's claims, the data was originally uploaded on June 6, 2023, and was subsequently updated on December 1, 2023. This timeline suggests that the group may have maintained access to the organization's infrastructure for a significant period before the public announcement was made.

Information regarding exfiltrated data

Despite the claims made by the ransomware group regarding the breach, the announcement remains vague regarding the specific nature of the stolen information. There is no detailed information or list of sample files provided on the announcement regarding the specific types of data allegedly exfiltrated.

• No specific data types were named in the listing.

About the organization

Relentless Church is a church based in Greenville, South Carolina, dedicated to sharing the message of Jesus Christ and focusing on the spiritual and personal development of individuals.

Risk assessment and industry implications

This incident may pose secondary risks to the institution's users or members, such as identity theft or targeted phishing attacks. Given the group's past activities, there is a possibility that the exfiltrated data could be utilized by malicious actors for commercial or manipulative purposes. The Dispossessor group emerged in late 2023 and is known for interfering with US law enforcement infrastructure in August 2024.

The public exposure of the institution's data could potentially trigger legal processes under data protection regulations. In such scenarios, organizations often face significant scrutiny regarding their compliance with privacy standards and their ability to protect sensitive member information.

In the broader context of cyber threats, ransomware groups frequently employ double extortion tactics. This method involves not only encrypting an organization's data to disrupt operations but also stealing sensitive information to use as leverage. By threatening to leak the data on public forums or leak sites, attackers aim to pressure the victim into paying a ransom to prevent the exposure of private information.

For organizations operating in sectors involving personal community data, maintaining robust defensive postures is critical. Common defensive steps include implementing multi-factor authentication, maintaining regular offline backups, and conducting regular security audits to identify vulnerabilities. Monitoring for unauthorized access and ensuring that all software is patched against known vulnerabilities are also fundamental components of a modern cybersecurity strategy to mitigate the risk of such breaches.