The Hive ransomware-as-a-service (RaaS) group has claimed duty for a cyber assault towards Tata Energy that was disclosed by the corporate lower than two weeks in the past.
The incident is claimed to have occurred on October 3, 2022. The menace actor has additionally been noticed leaking stolen information exfiltrated previous to encrypting the community as a part of its double extortion scheme.
This allegedly contains signed shopper contracts, settlement paperwork, in addition to different delicate info corresponding to emails, addresses, telephone numbers, passport numbers, taxpayer information, amongst others.
The Mumbai-based agency, which is India’s largest built-in energy firm, is a part of the Tata Group conglomerate.
Tata Energy had beforehand disclosed in a submitting with the Nationwide Inventory Trade (NSE) of India that an intrusion on the corporate’s IT infrastructure impacted “a few of its IT programs.”
In accordance with additional particulars shared by safety researcher Rakesh Krishnan, the leak comprises personally identifiable info (PII), together with Aadhaar identification numbers, everlasting account numbers (PAN), drivers’ license, wage specifics, and engineering drawings.
The newest growth can also be indicative of the truth that Tata Energy doubtless refused to pay a ransom, prompting the cybercrime gang to publish the siphoned information on its HiveLeaks darkish internet portal.
In accordance with statistics printed by Digital Shadows and Intel 471, Hive was the third-most prevalent ransomware household noticed in Q3 2022, coming solely behind LockBit 3.0 and Black Basta and surpassing the likes of AvosLocker, BlackByte, BlackCat, and Vice Society.
