Ransomware Operator Claims - Week 16 2021

Welcome to last week's ROC Report, an exclusive summary of Ransomware Operator's global victims that were claimed during the period between 19th April and 25th April 2021, kindly provided by our partners.

Flag Icons created by Freepik and provided by Flaticon.

Emotet: IT Security Teams Have Until Sunday To Discover Infections And Potentially Related Malware Before Botnet Is Erased From All Global Devices

Last Chance for Forensics Teams Ahead of Emotet Sunday Deadline

Passwordstate: Australian Password Manager Update Compromised In Supply Chain Attack Potentially Affecting Over 370,000 Customers

Passwordstate password manager hacked in supply chain attack

Reverb: 5.6 Million US Musical Instrument Marketplace's Customers' Personal Information Discovered Exposed On Unsecure Server

5.6 Million Records That Appear to Belong to ‘Reverb’ Users Leaked Online

Bourbon: Marseille Maritime Services Provider Suffers Cyber Attack Resulting In IT Systems Disruption

Bourbon confirms cyber attack

Mount Locker: Ransomware Operator Aggressively Changes Tactics With Anti-Prevention Features And A Possible Rebrand Into "AstroLocker"

Mount Locker Ransomware Aggressively Changes Up Tactics

Prometei: New Cryptojacking Botnet Targeting Unpatched Vulnerable Microsoft Exchange Servers In Widespread Global Campaign

Now this botnet is hunting for unpatched Microsoft Exchange servers

Gyrodata: US Oil And Gas Drilling Services Company's "DarkSide" Ransomware Attack Compromises Current And Former Employees' Personal Data

Gyrodata: Notice of Data Security Incident

Santa Clara Valley Transportation Authority: Californian Public Transport Agency Suffers "AstroLocker" Ransomware Attack

Santa Clara Valley Transportation Authority (VTA) targeted in apparent ransomware attack, hackers threaten to release trove of data

Japan Accuses Chinese State-Sponsored Hackers Of Launching Cyber Attacks Against 200 Japanese Aerospace And Military Organizations

Japan Says Chinese Hackers Targeted 200 Aerospace and Military Organizations

QNAP: Taiwanese NAS Device Users Targeted With "Qlocker" Ransomware Encrypting Files In Password-Protected 7-Zip Archives

Massive Qlocker ransomware attack uses 7zip to encrypt QNAP devices

Codecov: San Francisco Software Auditing Company's Supply Chain Attack Potentially Compromises 29,000 Global Organizations

Codecov Supply Chain Attack May Hit Thousands

Quanta Computer: Taiwan Computer Manufacturer's "REvil" Ransomware Attack Results In Stolen MacBook Plans And $50 Million Ransom Demand

REvil gang tries to extort Apple, threatens to sell stolen blueprints

Douglas Elliman: New York Property Management Company Suffers Data Breach Compromising Residents' Personal Data

Elliman’s property management arm suffers data breach

Eversource Energy: US Energy Supplier's Unsecure Server Exposes 11,000 Massachusetts Customers' Personal Data

Eversource Energy data breach caused by unsecured cloud storage

The Dixie Group: US Luxury Floor Covering Manufacturer's Ransomware Attack Results In IT Systems And Business Disruption

The Dixie Group Announces Ransomware Attack

GEICO: US Car Insurance Company Suffers Data Breach Exposing Over 17 Million Customers' Driver's License Numbers

Geico data breach exposed customers' driver's license numbers

Spotless: New Zealand Cleaning And Catering Company Suffers Data Breach Compromising Past And Present Employees' Personal Information

Major data breach at cleaning and catering company Spotless

Phone House: Spanish Mobile Phone Retailer's "Babuk Locker" Ransomware Attack Compromises 3 Million Customers' Data

Phone House suffers a cyber attack: data from 3 million Spanish customers at stake

Domino's: Indian Pizza Restaurant Chain's Data Breach Results In 180 Million Order Details And 1 Million Card Details For Sale Online

Domino’s India Data Breach: 180 Million User Records Being Sold On The Dark Web