Acteon Group Hit by Hunters International in Major Ransomware Attack
Incident Date:
June 17, 2024
Overview
Title
Acteon Group Hit by Hunters International in Major Ransomware Attack
Victim
Acteon Group
Attacker
Hunters International
Location
First Reported
June 17, 2024
Ransomware Attack on Acteon Group by Hunters International
Company Profile: Acteon Group
Acteon Group, a prominent entity in the offshore energy sector, specializes in subsea services across the lifecycle of offshore assets. With a workforce exceeding 2,000 and a revenue surpassing £500 million, Acteon stands out for its comprehensive solutions in subsea engineering, marine equipment supply, and geotechnical surveys. Their operations are crucial for the integrity and efficiency of offshore oil, gas, and renewable energy infrastructures.
Details of the Ransomware Attack
Recently, Acteon Group fell victim to a ransomware attack claimed by Hunters International. This incident has significantly disrupted their operations, underscoring the vulnerability of global enterprises to cyber threats. The attack not only halted their day-to-day activities but also posed a risk to sensitive data integral to their operations and clientele.
Profile of Hunters International
Hunters International has carved a niche in the cybercrime world by focusing on data theft rather than mere data encryption. This strategy sets them apart from other groups like Hive, which they have technologically evolved from. Hunters International's operations are marked by a less complex yet efficient use of ransomware, tailored to infiltrate diverse sectors globally.
Potential Vulnerabilities and Attack Vectors
The specific method of penetration by Hunters International into Acteon's systems remains under investigation. However, typical vectors could include phishing, exploitation of unpatched systems, or compromised credentials. Acteon's extensive digital footprint and the critical nature of their operational data make them an attractive target for groups like Hunters International, seeking to leverage stolen data for ransom.
Sources:
Recent Ransomware Attacks
The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.
The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.