bianlian attacks Rain the Growth Agency

Incident Date:

July 14, 2022

World map



bianlian attacks Rain the Growth Agency


Rain the Growth Agency




Portland, USA

Oregon, USA

First Reported

July 14, 2022

Rain the Growth Agency Suffers Ransomware Attack

Rain the Growth Agency, a full-service creative and media agency, has recently fallen victim to a ransomware attack perpetrated by the group Bianlian. This incident was disclosed on the group's dark web leak site. Rain the Growth Agency, with a significant presence in the Media & Internet sector, boasts over 24 years of operation, employing more than 300 individuals across over 30 states nationwide. The agency manages 40 clients across diverse sectors such as ecommerce, senior-focused goods, fitness, healthcare, and more, generating $800 million in annual billings.

The agency's online platform highlights their proficiency in media, creative, strategy, and analytics, showcasing successful campaigns for notable brands including OOFOS, Total Gym, and EGO POWER+. The team at Rain the Growth Agency comprises strategic, passionate, and innovative professionals like Perlita, Senior Media Planner; Kyle, Senior Analytics Systems Programmer; Stasia, Associate Director, Paid Search; Mark, Analytics Manager, Data Visualization; and Nicole, Senior Account Executive.

Understanding the Vulnerabilities

The specific vulnerabilities that facilitated this ransomware attack have not been detailed. Nonetheless, it is widely acknowledged that ransomware attacks exploit deficiencies within IT infrastructures, such as outdated software, unpatched vulnerabilities, or insufficient password policies. The precise vulnerability or vulnerabilities that enabled Bianlian's successful attack on Rain the Growth Agency remain unspecified.

Ransomware attacks pose severe risks to businesses, potentially leading to data loss, operational downtime, and substantial financial burdens. In response to such threats, it is imperative for organizations to implement comprehensive cybersecurity strategies. These should include regular software updates, the enforcement of strong password policies, and the provision of employee training focused on cybersecurity best practices.


Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.