Threat Intelligence Brief
Curated summary with source attribution
Source: ransomware.live
Threat Risk: High
Victim: Pope and Johnson County Title Company
Incident: Public leak of exfiltrated data following a ransomware attack.
Impact: Exposure of 2.5 million files, including PII, financial credentials, and privileged legal documents.
Attacker: Rhysingida
Analysis: The Rhysingida ransomware group has leaked approximately 784 GB of data belonging to a combined title, escrow, and law practice. The exfiltrated data is highly sensitive, containing plain-text bank passwords, Social Security numbers, and confidential criminal case materials. This incident underscores the high value of small legal and financial firms as targets for double-extortion ransomware.
Recommendations: Enforce phishing-resistant multi-factor authentication (MFA) for all remote access and email accounts; Audit and encrypt all stored sensitive client data and eliminate plain-text password spreadsheets; Implement a rigorous offline backup strategy to ensure recovery without paying ransoms
Source: Ransomware.live
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source