Tryax Realty Management listed on Monti ransomware leak site

• Ransomware group: Monti
• Country: Canada
• Sector: Professional Services
• Announcement date: August 26, 2024

Tryax Realty Management has been listed on the leak site of the Monti ransomware group. The threat actor claims to have exfiltrated over 50 GB of data from the organization.

The claims of the Monti group

The Monti group listed Tryax Realty Management on their leak site on August 26, 2024. According to the group's announcement, the alleged attack occurred on December 7, 2023. The threat actor claims that over 50 GB of data was exfiltrated from the organization's systems.

The group has stated that if the organization does not engage in communication, the full dataset may be released. Information regarding this group is limited. Ransomware groups often utilize leak sites to pressure victims into paying ransoms, a tactic known as double extortion. In these scenarios, attackers not only encrypt an organization's systems but also steal sensitive data, threatening to publish it publicly if their demands are not met. This approach increases the pressure on victims by threatening their reputation and legal standing.

Potential data involved in the leak

According to the announcement, the leak may contain a variety of sensitive documents and personal information. The specific types of data mentioned in the listing include:

• NYS ERAP records
• Employee personal data
• Lawsuit documents
• USA passports
• Driver's licenses

The exposure of such sensitive identity documents, such as passports and driver's licenses, could lead to long-term security issues for the victims. Such information is highly valuable to cybercriminals for identity theft and fraudulent activities.

About Tryax Realty Management

Tryax Realty Management is a real estate company providing property management services in the Bronx and Harlem neighborhoods of New York. The company focuses on the management and operation of residential properties in areas such as Morris Heights, Mt. Eden, and Hamilton Heights.

Risk assessment and organizational implications

The allegedly exfiltrated data may pose a high risk of identity theft and fraud for the organization's employees and affected individuals. Given the organization's operational region and the nature of the data, it is possible that they may face legal repercussions under relevant state laws and data protection regulations. Furthermore, the use of the exfiltrated data in double extortion tactics may damage the organization's reputation and facilitate targeted phishing attacks against third parties.

For organizations operating in the professional services and real estate sectors, protecting sensitive client and employee information is critical. Common defensive steps that organizations can take to mitigate these risks include implementing robust multi-factor authentication (MFA) across all systems, maintaining regular and offline backups, and conducting frequent security awareness training for employees to recognize phishing attempts. Additionally, organizations should focus on data encryption to ensure that even if data is exfiltrated, it remains unreadable to unauthorized parties. Monitoring network traffic for unusual data transfers can also help in detecting exfiltration attempts before large volumes of data are lost.