Varna Packaging listed on 8base ransomware leak site

• Ransomware group: 8base
• Country: Sri Lanka
• Sector: Manufacturing
• Announcement date: August 26, 2023

8base claims data breach at Varna Packaging

The 8base ransomware group has officially listed the Sri Lankan manufacturing company Varna Packaging on its dedicated leak site. According to the announcement made on August 26, 2023, the threat actors claim to have successfully compromised the organization's data. This listing follows a period of communication between the attackers and the victim organization, though the group indicates that these discussions have since been terminated.

The threat actors assert that they have obtained sensitive information belonging to the company. Following their established pattern, the group has threatened to release the allegedly stolen data publicly because communication between the parties has ceased. This tactic is a hallmark of modern ransomware operations, where the threat of data exposure is used as leverage against the target organization.

Alleged compromised data types

While the specific volume of the stolen data and the exact number of files involved have not been disclosed by the group, the content of the leak is described in detail. The information allegedly exfiltrated from Varna Packaging's systems includes a variety of sensitive business and personal documents. These documents represent a significant cross-section of the company's internal operations and administrative records.

The data types identified in the group's announcement include:

• Invoices
• Receipts
• Accounting documents
• Personal data
• Certificates
• Employment contracts

The inclusion of such diverse documentation suggests that the attackers may have gained access to multiple departments within the organization, ranging from finance and human resources to general administration.

About Varna Packaging

Varna Packaging is a prominent manufacturer based in Sri Lanka with a long-standing history in the industry, boasting over 60 years of experience. The company specializes in providing flexible packaging solutions. Their product offerings are designed to meet the needs of various sectors, including the food, detergent, and retail industries. The company focuses on providing sustainable, biodegradable, and customizable packaging options to its global and local clientele.

Risk assessment and industry implications

The incident involving Varna Packaging carries high severity due to the sensitive nature of the data mentioned and the organization's established position within the manufacturing sector. The potential impact of such a breach is multifaceted, affecting operational continuity and the commercial reputation of the firm. When sensitive documents are leaked, the consequences extend beyond immediate technical recovery.

The exposure of personal data and employment contracts poses significant secondary risks to the individuals involved. Specifically, employees may face threats such as identity theft or become targets for highly personalized phishing attacks. Furthermore, the disclosure of accounting and financial documents can lead to the exposure of trade secrets, potentially resulting in a loss of competitive advantage in the marketplace.

This incident highlights the effectiveness of the double-extortion methodology frequently employed by groups like 8base. In this model, attackers do not merely encrypt data to disrupt operations; they also steal it to threaten public disclosure, thereby pressuring the victim to pay to avoid regulatory and reputational damage. Such leaks can lead to violations of data privacy obligations and legal liabilities for the organization.

For organizations operating in the manufacturing and packaging sectors, maintaining robust cybersecurity postures is essential. Defensive strategies typically involve implementing strict access controls, conducting regular audits of financial and HR data, and ensuring that all communication channels are secured. Protecting the integrity of supply chain documentation and employee records is vital to maintaining the trust of both partners and staff in an increasingly digital industrial landscape.