Ransomware Group Hunters International Strikes Caxton & CTP Publishers & Printers Ltd

Incident Date:

April 13, 2024

World map

Overview

Title

Ransomware Group Hunters International Strikes Caxton & CTP Publishers & Printers Ltd

Victim

Caxton & CTP Publishers & Printers Ltd

Attacker

Hunters International

Location

Johannessburg, South Africa

, South Africa

First Reported

April 13, 2024

Ransomware Attack on Caxton & CTP Publishers & Printers Ltd

Victim Profile

Caxton & CTP Publishers & Printers Ltd is a South African media company headquartered in Johannesburg. The company operates in the publishing, printing, distribution, packaging, and stationery sectors. With 4,275 employees, Caxton & CTP is a public company with the ticker symbol CAT. The company's founder is Terrence Moolman.

Company Size and Industry Standing

The company's primary industry is Publishing, and it stands out in the media sector for its diverse operations in publishing, printing, and distribution. The company's Integrated Annual Report for 2023 provides detailed financial information, showcasing its total assets, net asset value per share, and financial performance over the years.

Vulnerabilities and Targeting by Threat Actors

Threat actors like the ransomware group Hunters International have targeted the company, aiming to steal data for malicious purposes. Specifically, they've managed to get their hands on a hefty stash: 576.2 gigabytes, amounting to nearly 280,000 files containing personal and financial information belonging to the company. The company's online assets, including its website, could potentially be exploited by cybercriminals as a gateway to launch attacks, given vulnerabilities they might find. Given its line of work in the media and internet sector, Caxton & CTP Publishers & Printers Ltd might find themselves particularly susceptible to falling victim to ransomware attacks.

Sources:

Pitchbook - Caxton & CTP Publishers & Printers Ltd

Caxton & CTP Integrated Annual Report 2023

Socradar - Hunters International Ransomware Group

Recent Ransomware Attacks

The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.

The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.