safepay ransomware group lists tritonsourcing.co.nz on its leak site

• Ransomware group: safepay
• Country: New Zealand
• Sector: Professional Services
• Announcement date: November 19, 2024

Safepay group claims data leak involving Triton Sourcing

The safepay ransomware group has listed data on its leak site that it claims belongs to the New Zealand-based organization tritonsourcing.co.nz. The announcement regarding this alleged data leak was made on November 19, 2024, marking the beginning of the process regarding the publication of this information.

The group's listing indicates that they are employing a double-extortion strategy. In such cyberattacks, threat actors typically steal sensitive information before encrypting a victim's systems. This allows them to demand ransom not only for the decryption of the data but also to prevent the public release of the stolen information, thereby exerting significant pressure on the targeted entity.

Details of the alleged breach

According to the claims made by the safepay group, the volume of data involved in this incident is approximately 10 GB. The group asserts that this data was obtained during an attack that allegedly took place on October 8, 2024. However, specific details regarding the exact content of the allegedly leaked data have not been provided by the group, and no screenshots have been shared to verify the nature of the files.

The listing names no specific data types that have been compromised.

The organization profile

Triton Sourcing is a professional services company based in New Zealand. The firm specializes in supply chain and sourcing services, providing professional support to businesses in areas related to strategic resource management and operational efficiency.

Potential impact and industry implications

The claim of a data leak poses significant risks to the institution's operational continuity and data privacy. The public release of sensitive information can lead to various secondary threats, such as identity theft or targeted phishing attacks directed at the institution's employees and customers. Such attacks often leverage stolen information to gain further access to systems or to defraud individuals.

Under the New Zealand Privacy Act 2020, the institution may face specific data breach notification obligations following such an incident. While public information regarding the safepay group remains limited, their use of a double-extortion strategy clearly demonstrates an intent to exert pressure on the organization. Once the actual content of the alleged data is clarified, the institution may face potential legal sanctions and significant reputational damage.

For organizations operating within the professional services and supply chain sectors, maintaining robust data protection frameworks is essential. Common defensive measures include implementing strict access controls, maintaining comprehensive offline backups, and conducting regular security awareness training to mitigate the risk of phishing. Furthermore, ensuring compliance with regional privacy regulations is a critical component of managing the legal and reputational risks associated with potential data breaches.