The KittyKatKrew ransomware group claims to have breached Tricolor Holdings, a United States-based technology-enabled auto finance company. Tricolor Holdings focuses on expanding access to affordable vehicle ownership for underserved and credit-invisible consumers through an integrated model of risk analytics, vehicle sales, and loan servicing.
According to the actor, the allegedly compromised data contains a wide array of highly sensitive corporate and personnel files. Based on the leaked file tree, the exposed data includes:
-
Active Directory user object exports
-
Financial portfolio exports and master servicing tapes
-
Archived legal and regulatory documents
-
Marketing lead capture records
-
Internal employee chat logs
-
Employee information lists
-
Production SQL database backups related to lending
