Trade-Mark Industrial Inc. Targeted by Hunters International Ransomware Group
Incident Date:
May 8, 2024
Overview
Title
Trade-Mark Industrial Inc. Targeted by Hunters International Ransomware Group
Victim
Trade-Mark Industrial Inc.
Attacker
Hunters International
Location
First Reported
May 8, 2024
Ransomware Attack on Trade-Mark Industrial Inc.
Victim Profile
Trade-Mark Industrial Inc. is an industrial, commercial, and institutional multi-trade contractor based in Canada. They specialize in millwrighting, rigging, electrical, piping, fabrication, structural, sheet metal, and HVAC installations and repairs. The company was founded in 1998 and has grown to become a leading contractor servicing the North American marketplace.
Company Size and Industry
The revenue and size of Trade-Mark Industrial Inc. are not provided in the available search results. They operate in the construction sector, offering services such as mechanical construction, electrical construction, millwright services, and plant maintenance.
Attack Details
A cybercriminal entity, Hunters International, targeted Trade-Mark Industrial, a Canadian company, using ransomware. The attackers exfiltrated a vast amount of sensitive data, including financial records, technical drawings, and confidential documents, totaling 2.1 TB. While the ransom demand is unspecified, the attackers leaked a sample of the exfiltrated data, putting Trade-Mark Industrial at risk of data exposure and other potential consequences associated with such breaches.
Vulnerabilities
The company's involvement in critical infrastructure projects and their extensive network within various industries could have made them an attractive target for cybercriminals.
Ransomware Group: Hunters International
Hunters International is a ransomware group that focuses on stealing data rather than encrypting it. They have customized their ransomware for simplicity and efficiency, targeting victims across healthcare, automotive, manufacturing, logistics, financial, educational, and food sectors worldwide. The group's operations have been linked to Nigeria through domain registrations and email addresses associated with the group.
Sources:
Recent Ransomware Attacks
The Recent Ransomware Attacks (RRA) site acts as a watchtower, providing you with near real-time ransomware tracking of attacks, groups and their victims. Given threat actors’ overarching, lucrative success so far, ransomware attacks have become the most ubiquitous, and financially and informationally impactful cyber threat to businesses and organizations today.
The site’s data is generated based on hosting choices of real-world threat actors, and a handful of other trackers. While sanitization efforts have been taken, we cannot guarantee 100% accuracy of the data. Attack updates will be made as source data is reported by reputable sources. By viewing, accessing, or using RRA you acknowledge you are doing so at your own risk.