The Black Shrantac ransomware group claims to have breached multiple organizations, listing them on their dark web leak site. The latest list of alleged victims posted by the group includes:
-
National Water Authority (Peru 🇵🇪): The technical governing body responsible for the integrated, sustainable, and multisectoral management of water resources in Peru, establishing regulations and procedures for water users and the general population.
-
Schneider Prototyping India Pvt. Ltd (Germany 🇩🇪 & India 🇮🇳): A subsidiary of Schneider International, a pioneer in rapid prototyping founded in Germany. The company specializes in the production-technical implementation of products in plastic and metal for industries such as automotive, medical technology, aviation, and mechanical engineering.
According to the actor, a total of 4TB of data was allegedly exfiltrated across both organizations (2TB per victim). The allegedly compromised data includes:
National Water Authority:
-
Water resource management information in Peru
-
Hydrometeorological data (rivers, reservoirs, rainfall)
-
Regulations, permits, and technical documents
-
Projects related to water use, irrigation, and risk management (floods, droughts)
Schneider Prototyping India Pvt. Ltd:
-
Human Resource and Account data
-
Design Data (CAD, CMM, CAM, etc.)
-
Finance Data (Tax, Invoices, etc.)
-
CFO and COO Data
-
Company Internal Data
