The Storm ransomware group continues to target Australian companies, this time adding the Victoria-based Macquarrie Corporation to its leak site last week.
The engineering business was listed in a 1 September leak post with a publication deadline of 16 September.
You’re out of free articles for this month
Storm does not share the volume of data stolen in its leak posts; however, it does share a dozen or more of the documents stolen in the attack as evidence of success.
In this case, the documents include an employee passport scan, a death certificate, company correspondence, customer data, and credit listings.
Macquarrie is aware of the incident and is taking steps to remediate the breach.
“Macquarrie Corporation is aware of a cyber security incident involving one of its external technology providers, resulting in unauthorised access to certain systems used by the business,” a company spokesperson told Cyber Daily.
“When the incident was identified, we immediately secured the affected systems, engaged independent cyber security specialists, and commenced work to restore operations through alternative arrangements independent of the affected provider.”
Macquarrie is also aware that several documents are already in circulation on the dark web.
“With the assistance of our external legal and cyber security advisers, we have reviewed the material currently known to be involved and are in the process of notifying those whose information has been identified as affected. We are committed to providing appropriate guidance and support,” Macquarrie’s spokesperson said.
“We are actively managing our legal and regulatory obligations in connection with the incident and liaising with relevant government and regulatory authorities, including the Australian Cyber Security Centre and Office of the Australian Information Commissioner.”
Who is Storm?
Storm was first observed in August, and since then, the group has posted the details of 49 alleged victims, equating to more than one compromised company every day since it began operation.
The Sharp Motor Group was one recent Australian victim, which confirmed it was responding to a cyber security incident in late August. It too had been compromised via a third party.
“Sharp Motor Group is aware that our third-party IT provider has been involved in a cyber incident,” a company spokesperson told Cyber Daily. Few of Storm’s victims have been as forthcoming, however, so it is impossible to tell if they, too, were victims of third-party hacks.
Most of the group’s Australian victims have been automotive or farm machinery dealers.
Who is Macquarrie?
Based in Port Melbourne, Victoria, Macquarrie Corporation has seven branches along Australia’s east coast.
The company describes itself as “a technology-focused engineering business providing standard and custom-built, leading-edge turnkey solutions for simple to complex diesel engine and machinery management requirements”.
Macquarrie employs 20 people and services customers across Australia and New Zealand.
Click Here For The Original Source.
