Prodegest Assessors targeted by 8base ransomware group

• Ransomware group: 8base
• Country: Spain
• Sector: Professional Services
• Announcement date: September 4, 2023

8base group claims data breach at Prodegest Assessors

The 8base ransomware group has announced a data breach involving Prodegest Assessors, a professional services firm based in Spain. According to an announcement made on a leak site on September 4, 2023, the threat actors claim that the organization's data has been compromised and subsequently uploaded to the group's servers.

In many modern ransomware attacks, threat actors employ a tactic known as double extortion. This method involves not only encrypting an organization's internal systems to disrupt operations but also exfiltrating sensitive data before the encryption occurs. The attackers then threaten to publish this stolen information on public leak sites if the ransom demands are not met. This pressure tactic is designed to maximize the impact of the attack by leveraging the threat of reputational damage and regulatory scrutiny.

Details of the claimed data leak

The threat actor's announcement includes a screenshot intended to demonstrate the scope of the breach. The group claims that a variety of sensitive documents have been leaked from the organization's systems. While the total volume of data and the specific file count have not been disclosed by the group, the types of information allegedly stolen include a wide range of administrative and personal records. The specific categories of data mentioned in the claim include:

• Invoices
• Receipts
• Accounting data
• Personal documents
• Certificates
• Employment contracts

The presence of such diverse documentation suggests that the attackers may have gained access to various departments within the organization, ranging from human resources to finance and accounting.

About Prodegest Assessors

Prodegest Assessors is a Spanish firm that has been established since 1978. The company operates within the professional services sector, providing a comprehensive suite of consulting services. Their expertise covers several critical business areas, including tax, accounting, finance, labor law, and insurance. Prodegest Assessors serves a diverse clientele, offering strategic growth support and assisting both corporate and individual clients in fulfilling their various business and legal obligations.

Potential impact and organizational risks

Given the specific nature of the services provided by Prodegest Assessors, the alleged leak carries significant implications. Because the firm handles sensitive financial and personal information for both individuals and corporations, the unauthorized access to such data could potentially lead to serious data privacy breaches and significant legal liabilities for the organization. The loss of sensitive documents such as employment contracts and accounting data increases the risk of secondary threats.

Secondary risks stemming from such a breach often include targeted phishing attacks, where criminals use the stolen information to craft highly convincing fraudulent communications. Additionally, the exposure of personal documents and certificates can lead to identity theft. The complexity of such operations is often reflected in the tools used; for instance, the 8base group has been reported to utilize ransomware derivatives of Phobos, which may indicate a sophisticated level of operation.

For organizations operating in the professional services sector, maintaining robust cybersecurity defenses is essential. Common defensive steps include implementing multi-factor authentication (MFA) across all systems, maintaining regular and offline backups, and conducting regular security awareness training for employees to recognize phishing attempts. Furthermore, organizations should focus on the principle of least privilege, ensuring that users only have access to the specific data required for their roles, thereby limiting the potential blast radius of a single compromised account.