The Black Shrantac ransomware group claims to have breached several companies, posting the allegedly stolen data on its dark web leak site. The latest list of alleged victims posted by the group includes:
- CyPark Resources Berhad (🇲🇾): A public listed company in Malaysia specializing in renewable energy, construction, green tech, and waste management.
- TENAX Law Group PC (🇺🇸): A US-based law firm in Point Richmond, CA, serving clients in business law, employment law, real estate, and civil litigation.
- The Matlusky Firm LLC (🇺🇸): A full-service civil practice law firm in the United States with bar memberships in Delaware, Pennsylvania, and New Jersey.
- CCI Tax Pros, Inc (🇺🇸): A US-based firm specializing in tax preparation and consulting services for small businesses and individuals.
The Data
According to the actor, the compromised data varies by victim:
- CyPark Resources Berhad (450GB):
- Finance information (invoices, insurance, bank data, assets, salary)
- HR information (employee lists, email, addresses)
- Company data on environmental engineering, landscaping, and infrastructure
- TENAX Law Group PC (150GB):
- Data related to business law, employment law, real estate, and bankruptcy matters
- Civil litigation files
- Insurance documents
- The Matlusky Firm LLC (100GB):
- Finance information (payrolls, bank accounts, tax, bills, invoices)
- Deposition contacts, planning data, and research data
- Sensitive credentials and employee data (Driver’s Licenses, SSNs)
- Full server and PC backups
- CCI Tax Pros, Inc (80GB):
- Tax Filing Data: Personal information (Names, Social Security numbers), income data (W-2s, 1099s), and records of filed tax returns.
- Tax Planning Data: Tax liability estimates, investment plans, and deduction strategies.
- Audit Support Data: Records of past audits, IRS correspondence, and supporting financial documents.
- Financial Consulting Data: Personal finance records, retirement plans (401k, IRAs), and budgeting information.
- Business Services Data: Employee payroll data, business income statements, and compliance documentation.
