It is not unheard of for ransomware groups to publicly misidentify their victims. We saw such errors from the outset of groups publicly naming and shaming victims and leaking data. DataBreaches reported on a few such cases involving Maze and has reported on other misidentifications in other groups since then. DataBreaches has occasionally contacted threat groups to ask them which victim they actually attempted to extort — the one that seems to be the source of the data or the one they named on their leak site. In all cases, the threat actors make responded that they did attempt to gouge the actual victim but just erred in their leak site listing/attribution. Victim-naming errors on leak sites, if repeated by researchers and analysts on social media, can damage uninvolved entities’ reputations. alexander Martin reports on a slip involving Cl0p threat actors: south Staffordshire water “has been the direct of a criminal cyber attack”, the troupe has confirmed. In a statement, it stressed it was “still supplying safe water to all of our Cambridge water and southward Staffs water customers”. “This is thanks to the robust systems and controls over water render and quality we have in place at all times as wellspring as the quick act of our teams to respond to this incident and implement the additional measures we get put in place on a precautionary basis.” The argument was released after a ransomware radical known as Cl0p claimed to experience hacked a different water company’s networks. show more at Sky News.