The Maze team attackers continue to declare more of their ransomware victims that have not complied with their ransom demands, and they keep to dump data from those who do not pay them. When i checked their site again today, I noticed that they had announced that they hold dumped all their files on the city of Pensacola, and they have also dumped all their files on Salumificio Fratelli Beretta, a cured meat provider. But i also see other sites that have been added or updated, including Stockdale Radiology in California. Stockdale Radiology is one of the medical entities maze Team had informed me about previously and had sent me a sample of patient files from. According to maze Team’s site, the radiology center’s data were locked on January 17 of this year. The site lists two zipped archives of files as proof — but both links return 404 as of today’s date. There is no notice up on Stockdale Radiology’s site at this time about any round or disruption in their services. medical Diagnostic Laboratories, LLC (MDL or MDLab) had already had some of their data dumped by Maze Team. They now appear to have had more of their files dumped. There is no promulgation or notice on their website that might inform patients of any problem or data theft and there is no notice from the listed on HHS’s public breach tool at this time. When I had asked Maze team about their success place in terms of victims paying them, they indicated that it was more than 50%, although of course, i hold no way to verify that particular claim. But there are other medical entities that they claim they have attacked that hold not appeared on their website yet, so i veneration we are in for a draw of announcements and updates from them. Lakeland Community College in Ohio also became a victim, it seems. Their data were reportedly locked on January 12 and 19 gilbert of data were allegedly downloaded. There is no mark on the college’s site as of today, and the proof file is not linked to a working file. And while my focalise tends to live on medical and educational facilities, let’s not forget that Maze team is attacking all kinds of enterprises, including, it seems, Anheuser-Busch (ST. LOUIS, MO). Maze team does not provide a lock date, but they added them to their site ternion weeks ago and they doh provide sample files from the well-known beer brewery. The samples include some certified mail, a number of lease-related files, sales projections, and other files that include their 2019 incident response plan for any PCI-DSS incidents. They have also attacked a law firm in Oregon: Hamilton and Naumes, LLC. That attack took place on january 16, and there are no proof files uploaded as of today’s date, but if they were able to catch everything, then there may well be a lot of sensitive files as the firm’s areas of apply include family law, juvenile law, and crook defense. And as I did with covering thedarkoverlord, i will notation that i understand why some journalists will not covering these attackers or other attackers using the same model for fear of encouraging them or for fear of helping to put coerce on the victim entities. I prize that decision by others while continuing to believe that I assist the public best by retention it informed as to what is going on so that they can gauge risk for themselves and perhaps take more steps to foreclose themselves from becoming victims.
