Meow Ransomware Hits CPA Tax Solutions LLC: Data Security Breach
Incident Date:
August 3, 2024
Overview
Title
Meow Ransomware Hits CPA Tax Solutions LLC: Data Security Breach
Victim
CPA Tax Solutions LLC
Attacker
Meow
Location
First Reported
August 3, 2024
Ransomware Attack on CPA Tax Solutions LLC by Meow Ransomware Group
CPA Tax Solutions LLC, a certified public accounting firm based in Connecticut, has recently fallen victim to a ransomware attack orchestrated by the notorious Meow ransomware group. The breach, discovered on August 5, has raised significant concerns about the security of sensitive financial information handled by the company.
About CPA Tax Solutions LLC
CPA Tax Solutions LLC, formerly known as Solakian, Caiafa & Company, LLC, has been in operation since 1992. The firm, led by Anthony F. Lucci, CPA, Esq., MST, offers a comprehensive range of tax and accounting services tailored to both individual and business clients. The firm operates from offices in Hamden and Madison, Connecticut, and serves industries such as distribution, manufacturing, construction, and service professionals.
For individuals, the firm provides services including tax preparation, retirement savings and tax planning, multi-year tax planning, income tax planning, charitable gift tax planning, and estate and gift tax planning. For businesses, CPA Tax Solutions LLC offers small business accounting, payroll services, outsourced accounting services, financial statement preparation, succession planning, strategic business planning, and new business formation. The firm also specializes in IRS-related services, including audit representation and resolving back taxes owed.
Attack Overview
The ransomware attack on CPA Tax Solutions LLC was claimed by the Meow ransomware group via their dark web leak site. While the exact size of the data leak remains unknown, the incident has highlighted vulnerabilities in the firm's cybersecurity measures. Given the sensitive nature of the financial data handled by the firm, the breach poses a significant risk to both individual and business clients.
About Meow Ransomware Group
Meow Ransomware emerged in late 2022 and is associated with the Conti v2 ransomware variant. The group resurfaced in late 2023 and has been highly active in 2024, primarily targeting victims in the United States. Meow Ransomware employs various infection methods, including phishing emails, exploit kits, Remote Desktop Protocol (RDP) vulnerabilities, and malvertising. Once a system is compromised, the ransomware encrypts files using a combination of the ChaCha20 and RSA-4096 algorithms.
The group maintains a data leak site where they list victims who have not paid the ransom. They frequently target industries with sensitive data, such as healthcare and medical research, and have been known to post victim data on their leak site if the ransom is not paid. Security researchers have identified the threat actors behind Meow Ransomware as the "Anti-Russian Extortion Group," likely due to their targeting of entities in response to the Russia-Ukraine war.
Penetration and Impact
Meow Ransomware could have penetrated CPA Tax Solutions LLC's systems through various means, including phishing emails or exploiting RDP vulnerabilities. The firm's extensive handling of sensitive financial data makes it an attractive target for ransomware groups.
Sources
Recent Ransomware Attacks
The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.
The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.