Ransomware Attack on East Shore Sound LLC

Incident Date:

May 16, 2024

World map

Overview

Title

Ransomware Attack on East Shore Sound LLC

Victim

East Shore Sound LLC

Attacker

Ransomhub

Location

Forest Hill, USA

Maryland, USA

First Reported

May 16, 2024

Ransomware Attack on East Shore Sound LLC

Victim Overview

East Shore Sound LLC, a company based in Jarrettsville, Maryland, specializes in providing audio-visual equipment and solutions for various events and installations. They offer turnkey design/build solutions, project management, and labor resources for system installation. The company's standout feature is its focus on simple and intuitive designs for intercom systems, catering to a wide range of needs.

Attack Details

The cybercrime group RansomHub targeted East Shore Sound by employing ransomware as their method of attack. The victim's website was compromised, resulting in the theft of approximately 50 GB of data. Although no specific ransom demand was mentioned, the exfiltration of such a significant amount of data raises concerns about the security and privacy of the company's information.

Ransomware Group Profile

RansomHub is a new ransomware group that has emerged in the cyber threat landscape, distinguishing themselves by making claims and backing them up with data leaks. The group operates as a Ransomware-as-a-Service (RaaS) group, with affiliates receiving 90% of the ransom money and the remaining 10% going to the main group. RansomHub has targeted various countries without following a specific pattern, including the US, Brazil, Indonesia, and Vietnam.

Company Vulnerabilities

East Shore Sound LLC, being a small business in the audio-visual equipment industry, may have been targeted due to the valuable data they possess, such as client information, project details, and financial records. The lack of fortified cybersecurity measures or employee training could have made them vulnerable to such attacks.

Sources:

Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.