Ransomware

Estes Express Lines reports ransomware-related data breach

Share

Major U.S. private freight transportation provider Estes Express Lines has disclosed that 21,184 individuals had their data stolen following a ransomware attack initially reported in October, which was claimed by the LockBit operation, The Register reports. Information compromised in the intrusion included individuals' names and Social Security numbers, according to Estes' filing with the Maine Attorney General's Office. However, more data could have been compromised as indicated by the blank text in a breach notification letter that the shipping giant sent to the people impacted by the incident, which emphasized that there has been no evidence of any identity theft and fraud following the incident even after it refused to pay the ransom demanded by attackers. No additional information regarding the intrusion, including the initial attack vector, the extent of stolen data, and the amount demanded by ransomware attacks, were provided by Estes when sought by The Register.

An In-Depth Guide to Ransomware

Get essential knowledge and practical strategies to protect your organization from ransomware attacks.

Related

Novel WolfsBane backdoor leveraged in Chinese attacks against Linux systems

Attacks with Wolfsbane commence with the deployment of the 'cron' dropper delivering the KDE desktop component-spoofing launcher, which deactivates SELinux and alters user configuration files before triggering the privacy malware component that has file operation, data theft, and system manipulation command support, an analysis from ESET revealed.

ONNX phishing-as-a-service operation disrupted

Organizations in the financial services sector have been primarily targeted by the ONNX, whose Telegram-based operations had been cut off following a court order that allowed Microsoft to transfer the PhaaS platform's infrastructure to its servers, according to Microsoft Digital Crimes Unit Assistant General Counsel Steven Masada.

Ransomware attacks primarily caused by poor cyber hygiene

Aside from primarily leveraging basic usernames for their accounts, organizations impacted by ransomware intrusions from July to September — including those in the government and healthcare industries — also mostly failed to implement multi-factor authentication that could have deterred brute-force attacks.

Related Events

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.