Ransomware Hotspot Events

Portland Bar Chain McMenamins Suffers Ransomware Attack

Portland, Oregon's hotel and bar chain McMenamins stated that the company was attacked with ransomware, which may have compromised employee personal information, but customer payment information seems unaffected. McMenamins claimed to have confirmed and blocked the ransomware attack on December 12, notified the FBI, and hired a cybersecurity firm to determine the origin and full scope of the attack. In a press release, the company said employee data such as names, addresses, birth dates, social security numbers, and direct deposit bank account information might have been obtained. The company stated: "To reassure employees, McMenamins will offer identity and credit protection services and provide a dedicated help hotline."

Reference Link:

https://www.kgw.com/article/news/local/mcmenamins-ransomware-attack/283-dc039d56-cf82-4f06-8862-c2f6223e3893

Clop Ransomware Group Posts Secret Police Data on Dark Web

After a successful phishing attack on IT service provider Dacoll in October 2021, the Clop ransomware group obtained a large amount of data, including from the Police National Computer (PNC), managed by Dacoll. When Dacoll refused to pay the ransom, attackers uploaded hundreds of files to the dark web. Among the uploaded PNC files were close-up photos of drivers from the UK National Automatic Number Plate Recognition System (ANPR). The leakage of law enforcement-held data is particularly concerning as these data are highly confidential and could disrupt criminal investigations. If this information falls into the wrong hands, it could pose serious risks to crime victims and witnesses.

Reference Link:

https://www.infosecurity-magazine.com/news/ransomware-gang-police-data-dark/