SOTO Consulting Engineers listed on ALPHV ransomware leak site

• Ransomware group: ALPHV
• Country: Australia
• Sector: Professional Services
• Announcement date: July 26, 2023

ALPHV claims to have leaked SOTO Consulting Engineers data

The ALPHV ransomware group has listed SOTO Consulting Engineers on its leak site, claiming to have compromised the institution's systems. According to the group's announcement, a significant volume of data has been exfiltrated and made available for download. This claim is linked to a cyber event that the group alleges occurred in February 2023.

Ransomware groups often utilize leak sites to exert pressure on their victims through a tactic known as double extortion. In this model, attackers not only encrypt an organization's data to disrupt operations but also steal sensitive information to threaten its public release. By publishing stolen data on a dedicated site, the threat actors aim to damage the victim's reputation and force a ransom payment to prevent further disclosure.

Details of the alleged breach

The ALPHV group, also known as BlackCat, has published a listing alleging that they have successfully breached SOTO Consulting Engineers. The group claims that they have obtained a substantial amount of information from the institution's systems. While the specific nature of the leaked files has not been explicitly detailed by the attackers, the group has provided evidence through screenshots indicating that a large dataset is accessible.

The group's claims regarding the stolen information include the following:

• A total data size of 356 GB has purportedly been made available for download.

The exact contents and the specific types of files contained within this 356 GB dataset remain unspecified by the threat actors. No information was provided regarding the specific file counts or the specific nature of the files involved in this alleged leak.

About SOTO Consulting Engineers

SOTO Consulting Engineers is an Australian-based firm that provides a wide range of engineering and consulting services. The company operates within the professional services sector, focusing on large-scale projects in the industrial, mining, and infrastructure sectors. Their expertise spans multiple technical disciplines, including mechanical, structural, and electrical engineering, where they specialize in delivering complex solutions for their clients.

Potential risks and industry implications

This alleged data leak may pose significant risks to the institution's operational continuity and its commercial reputation. Because SOTO Consulting Engineers is an Australian-based entity, the presence of any employee or client information within the leaked data could trigger legal obligations under the Australian Privacy Act 1988. Such regulatory frameworks often require organizations to report breaches involving personal information to both regulators and the affected individuals.

Furthermore, the public disclosure of such data can lead to various secondary risks. These include the possibility of identity theft or the execution of targeted phishing attacks against the institution's clients and supply chain partners. When sensitive corporate or personal data is leaked, attackers often use it to craft highly convincing social engineering campaigns against the organization's business associates.

The ALPHV group is recognized as a Ransomware-as-a-Service (RaaS) operator that utilizes Rust-based malware. Information regarding the inner workings and specific details of this group remains limited in the public domain. For organizations operating in the professional services and engineering sectors, maintaining robust data security protocols is essential to mitigate these types of threats. Standard defensive measures often include implementing strict access controls, conducting regular security audits, and ensuring that all employees are trained to recognize phishing attempts. It may be prudent for organizations facing such claims to review their security posture and follow established protocols for notifying affected parties.