The Worldleaks ransomware group claims to have breached two companies from different sectors, adding a German retail giant and a US medical laboratory to its growing list of victims.
The latest list of alleged victims posted by the group includes:
- CHRIST Juweliere (🇩🇪): A well-established jewelry and watch company founded in 1863. The retailer operates over 200 stores across Germany and Austria and maintains a significant e-commerce presence.
- Centers Laboratory (🇺🇸): A medical testing laboratory based in the United States.
According to the actor, the compromised data from CHRIST Juweliere includes sensitive customer and corporate information. The total volume of exfiltrated data is claimed to be between 7-10 TB. The allegedly compromised data includes:
- Full names
- Email addresses
- Phone numbers
- Dates of birth
- Shipping and billing addresses
- Purchase history
- Employee personal information
- Internal store data (e.g., alarm system designs, finances)
For Centers Laboratory, the threat actor has released samples indicating a severe breach of patient and financial data. The allegedly compromised data includes:
- Patient full names
- Dates of birth
- Social Security Numbers (SSN)
- Medical lab test results
- Primary billing and insurance information
- Corporate bank account details
