RansomHub Ransomware Attack Compromises Albyn Housing Society's Data Security

Incident Date:

August 17, 2024

World map

Overview

Title

RansomHub Ransomware Attack Compromises Albyn Housing Society's Data Security

Victim

Albyn Housing Albyn Housing Society

Attacker

Ransomhub

Location

Invergordon, United Kingdom

, United Kingdom

First Reported

August 17, 2024

RansomHub Targets Albyn Housing Society in Ransomware Attack

Albyn Housing Society, a non-profit housing association and Scottish charity, has become the latest victim of a ransomware attack orchestrated by the notorious ransomware group RansomHub. The attack has compromised the organization's website, www.albynhousing.org.uk, putting the sensitive information of thousands of individuals at risk.

About Albyn Housing Society

Founded in 1973, Albyn Housing Society is a registered social landlord and Scottish charity dedicated to providing affordable housing in the Highlands of Scotland. With headquarters in Invergordon, the organization manages over 3,700 properties across various regions, including Caithness, Sutherland, Ross-shire, Inverness-shire, Nairn, Badenoch & Strathspey, and Moray. The society employs over 90 staff members and focuses on community development and sustainability, offering services beyond social housing, such as mid-market rentals and low-cost ownership initiatives.

Attack Overview

The ransomware attack on Albyn Housing Society was claimed by RansomHub via their dark web leak site. The attack has disrupted the organization's operations, which include the management and maintenance of owned homes and properties leased from other owners. The breach has raised concerns about the security of tenant information and the potential impact on the society's ability to provide essential services.

About RansomHub

RansomHub is a relatively new ransomware group believed to have roots in Russia. Operating as a Ransomware-as-a-Service (RaaS) group, RansomHub affiliates receive 90% of the ransom money, with the remaining 10% going to the main group. The group has targeted various countries, including the US, Brazil, Indonesia, and Vietnam, with a particular focus on healthcare-related institutions. RansomHub's ransomware strains are written in Golang, a trend that is becoming more common in the ransomware world.

Penetration and Impact

While the exact method of penetration remains unclear, it is likely that RansomHub exploited vulnerabilities in Albyn Housing Society's cybersecurity infrastructure. Common attack vectors include phishing emails, unpatched software, and weak password policies. The use of Golang in their ransomware strains suggests a sophisticated approach, potentially bypassing traditional security measures. The attack underscores the importance of strong cybersecurity practices, especially for organizations handling sensitive personal data.

Sources

Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.