Veal and Prasad listed on 8base ransomware leak site

• Ransomware group: 8base
• Country: Australia
• Sector: Professional Services
• Announcement date: May 23, 2023

8base claims data breach at Veal and Prasad

The 8base ransomware group has published a leak announcement on its dedicated leak site, claiming to have compromised the data of Veal and Prasad, a professional services firm based in Australia. According to the group's announcement, the breach occurred on January 31, 2023. The threat actor has claimed to have made a portion of the stolen information accessible to the public via a public file-sharing platform.

Ransomware groups often utilize leak sites to exert pressure on their victims through a tactic known as double extortion. In these scenarios, attackers do not merely encrypt an organization's systems to disrupt operations; they also exfiltrate sensitive data before the encryption occurs. By threatening to release this stolen information publicly, the attackers aim to coerce the victim into paying a ransom to prevent the exposure of confidential records. This method increases the leverage of the cybercriminal group, as the threat of reputational damage and legal consequences often outweighs the immediate operational impact of the encryption itself.

Data involved in the claimed breach

The announcement provided by the 8base group includes specific claims regarding the volume of information they have allegedly acquired. Based on the screenshots provided by the group, it is claimed that more than 50 GB of data has been leaked. While the specific file count was not provided in the announcement, the scale of the data suggests a significant volume of information was targeted.

The following types of data are identified as being affected by this claimed incident:

• Customer data

Given the nature of the organization's business, there is a potential for the leaked data to include sensitive tax records or trade secrets, though the group has not specified the exact contents beyond the general category of customer data.

About Veal and Prasad

Veal and Prasad is a professional accounting and taxation practice located in Hillcrest, Australia. The firm is dedicated to providing a range of professional services to its clients, specifically focusing on tax planning and accounting services. As a firm operating within the professional services sector, the organization handles sensitive financial information as a core part of its business operations.

Analysis and implications of the claim

The claim made by 8base carries significant implications for the firm and its clientele. The potential exposure of financial or personal information belonging to the firm's clients poses a serious risk. Specifically, there is a potential for clients to be targeted by malicious actors through identity theft or spear-phishing attacks, where attackers use stolen information to craft highly convincing fraudulent communications.

Under Australian privacy laws and data protection regulations, a breach of this nature may trigger mandatory data breach notification requirements for the firm. Organizations in the professional services sector must remain vigilant, as the data they manage is often highly sensitive. To defend against such threats, organizations typically implement multi-layered security strategies, including robust access controls, encryption of data at rest and in transit, and continuous monitoring of network activity to detect unauthorized exfiltration.

It is also worth noting the operational context of the threat actor. The 8base group is known as a double-extortion actor that has been active since 2022. However, it is important to consider that an intervention into their infrastructure in early 2025 may suggest changes in their operational capacity, which could influence how they carry out such claims or manage their leak sites.