Stats.gov.bb listed on safepay leak site

• Ransomware group: safepay
• Country: Barbados
• Sector: Government & Defense
• Announcement date: November 19, 2024

The safepay group claims a breach of stats.gov.bb

The threat actor known as safepay has listed the Barbados Statistical Service (stats.gov.bb) on its leak site. According to the announcement made on November 19, 2024, the group claims to have successfully targeted the institution, which operates within the government and defense sector. This listing follows a period of time during which the group allegedly maintained access to the target's systems.

The details provided by the threat actor suggest a timeline for the incident. While the announcement was made in mid-November, the group alleges that the actual attack was carried out on October 29, 2024. The group claims to have discovered the targeted data on November 19, 2024. At this stage, the listing serves as a claim by the ransomware group regarding the compromise of the government agency.

Details regarding the claimed data and event

The safepay group has made specific claims regarding the volume of information they have allegedly exfiltrated from the institution. The announcement states that the total amount of data involved in this incident is 330 GB. However, the group has not provided further specifics regarding the nature of the files or the exact contents of the stolen information.

Regarding the specific types of information compromised, the listing names no data types and has not provided any screenshots to verify the contents of the files. There is no information available concerning the specific file count or the amount of the ransom demand requested by the group. The lack of detailed information regarding the content of the leaked data means the exact scope of the sensitive information at risk remains unverified by the source.

About the Barbados Statistical Service

The Barbados Statistical Service (stats.gov.bb) is the official government agency responsible for the collection, analysis, and publication of data for Barbados. The organization plays a critical role in the nation's administration by managing economic, social, and demographic data. As a central pillar for national data, the agency handles information that is vital to the country's governance and public understanding of its socio-economic landscape.

Potential risks and organizational implications

This incident may pose a risk that could result in the institution's sensitive data becoming public. The use of double extortion by the safepay group suggests that the data may have been encrypted and that the institution could be facing threats of further data exposure. In double extortion schemes, attackers typically encrypt the victim's systems to disrupt operations and simultaneously steal sensitive data to use as leverage for ransom payments.

Given that the institution hosts government data, the leak could potentially have negative impacts on national security and the privacy of citizen data. The exposure of demographic or economic datasets can lead to significant challenges for public trust. Furthermore, the institution may face data breach notification obligations under relevant regulations, which could lead to a loss of institutional reputation. Public information about the safepay group remains limited, making it difficult to ascertain their full tactics and procedures.

For organizations operating in the government and defense sectors, such incidents highlight the necessity of robust defensive measures. Common defensive steps include maintaining rigorous backup protocols, implementing multi-factor authentication, and conducting regular security audits to identify vulnerabilities before they can be exploited by threat actors. Protecting sensitive national data requires a multi-layered approach to cybersecurity to mitigate the risks of both operational disruption and data exfiltration.