New Hudson Facades LLC: Targeted by Play Ransomware Group

Incident Date:

April 26, 2024

World map

Overview

Title

New Hudson Facades LLC: Targeted by Play Ransomware Group

Victim

New Hudson Facades LLC.

Attacker

Play

Location

Linwood, USA

Pennsylvania, USA

First Reported

April 26, 2024

Ransomware Attack on New Hudson Facades by Play Group

Company Profile: New Hudson Facades LLC

New Hudson Facades LLC, an architectural facade company founded in 2014 and based in Linwood, Pennsylvania, specializes in the design, engineering, manufacturing, and installation of custom curtain wall systems. The company is a key player in the construction and architectural industry with a focus on creating high-performance building facades for iconic structures in major cities such as New York, Chicago, and Los Angeles. Employing 202 individuals, New Hudson Facades reported an annual revenue of $34 million in 2024. Their notable projects include involvement in the prestigious Hudson Yards Project in New York City.

The company's standout features include a robust in-house team of building physics analysts and engineers who tackle complex geometries using advanced engineering and modeling software. This single-shop design and fabrication capability streamlines the curtainwall design and installation process, making them a distinguished entity in their sector.

Details of the Ransomware Attack

The Play ransomware group, known for targeting Linux systems and associated with the Babuk code, has claimed responsibility for the attack on New Hudson Facades. The attack details surfaced on the group's dark web leak site, indicating a significant breach involving the exfiltration of sensitive data. Compromised information includes client documents, payroll details, accounting records, contracts, tax information, IDs, and financial data.

While the exact ransom demand and the total amount of data stolen have not been disclosed, the breach represents a severe security threat to the integrity and privacy of New Hudson Facades and its clients.

Vulnerabilities and Industry Impact

The company's integration of advanced technological solutions and the handling of substantial confidential project data make it an attractive target for cybercriminals. The architectural and construction sectors are increasingly reliant on digital technologies, which expands the attack surface for threat actors looking to exploit vulnerabilities in software and network security.

The incident underscores the critical need for enhanced cybersecurity measures within the industry, particularly for companies like New Hudson Facades that manage large volumes of sensitive information.

Sources

Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.