ransomhouse attacks Saskatchewan Liquor and Gaming Authority
Incident Date:
May 9, 2022
Overview
Title
ransomhouse attacks Saskatchewan Liquor and Gaming Authority
Victim
Saskatchewan Liquor and Gaming Authority
Attacker
Ransomhouse
Location
First Reported
May 9, 2022
Saskatchewan Liquor and Gaming Authority Targeted by RansomHouse
The Saskatchewan Liquor and Gaming Authority (SLGA) has recently become a target of the ransomware group RansomHouse, which has openly claimed responsibility for the cyberattack on their website. The SLGA, a pivotal entity within the Government sector, plays a crucial role in regulating alcohol, cannabis, and gaming across Saskatchewan, operating approximately 35 liquor stores in 24 communities.
This incident marks another cybersecurity challenge for the SLGA, following a December 2021 cybersecurity incident that significantly impacted their computer systems. This previous attack led to the temporary shutdown of certain systems and applications, with subsequent investigations revealing that a critical vulnerability had been left unpatched, thereby facilitating the breach.
RansomHouse, a group known for exploiting vulnerabilities to gain access to target networks, has been active since December 2021. The group often criticizes the security measures of its targets, pointing out the inadequacy of security flaw disclosure rewards. Besides the SLGA, RansomHouse has targeted various organizations, including a German airline support service provider.
While the full extent of the damage from the RansomHouse attack on the SLGA remains undisclosed, efforts are underway to restore the affected systems and evaluate the operational impact. This incident underscores the critical need for robust cybersecurity defenses and constant vigilance against evolving cyber threats.
Sources
- Cyber Security Incident at SLGA | News and Media | Government of Saskatchewan
- Novel RansomHouse cybercrime operation detailed | SC Media
- Saskatchewan Liquor and Gaming Authority joins growing list of organizations facing cyberattacks | CBC News
- SLGA investigation states cybersecurity attack compromised 40,000 people | Globalnews.ca
Recent Ransomware Attacks
The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.
The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.