Ransomware Attack on Advance Press
Incident Date:
May 22, 2024
Overview
Title
Ransomware Attack on Advance Press
Victim
Advance Press
Attacker
Ransomhouse
Location
First Reported
May 22, 2024
Ransomware Attack on Advance Press by RansomHouse
Victim Overview
Advance Press, a printing company operating in the Business Services sector, was targeted in a ransomware attack by the group RansomHouse. The company offers a range of printing services, including offset printing, digital printing, and large format printing. They also provide design services and marketing materials such as brochures, business cards, and flyers. With a revenue of $5.6 million and 25 employees, Advance Press is a notable player in the industry.
Ransomware Group Profile
RansomHouse is a unique data extortion group that emerged in late 2021. Unlike traditional ransomware groups, RansomHouse focuses on stealing sensitive data from victims and threatening to publicly release it if a ransom is not paid. The group claims to be a "professional mediators community" and aims to highlight companies that neglect security measures.
Attack Overview
On March 17, 2024, Advance Press fell victim to a ransomware attack that resulted in the encryption of approximately 300GB of data. The attackers posted evidence of the breach on the dark web, attracting significant attention with 8,686 views. While an evidence pack was made downloadable, the full data dump was not released, pending the company's response to the demands.
Company Vulnerabilities
Advance Press's vulnerabilities in being targeted by threat actors may stem from the sensitive nature of the data they handle for their clients, including design files, marketing materials, and potentially confidential information. Additionally, as a printing company that likely stores a large amount of digital data, they may have been susceptible to attacks due to inadequate cybersecurity measures or employee awareness.
Sources:
Recent Ransomware Attacks
The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.
The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.