MeridianLink Security Incident

Attacks Cloud Data Executive Decisions IoT Malware Mobile Network Security Strategy Threat Defense Filter Categories Attacks Cloud Data Executive Decisions IoT Malware Mobile Network Security Strategy Threat Defense BlackCat/APLHV ransomware gang files SEC complaint over victims undisclosed data breach Unprecedented move takes the threat groups extortion efforts to a new level Add bookmark Michael Hill 11/16/2023 Notorious ransomware group BlackCat/APLHV has filed a US Securities and Exchange Commission (SEC) complaint against one of its alleged victims for failing to comply with a four-day cyber attack disclosure rule. The unprecedented move takes the threat groups extortion efforts to a new level after it claimed to have recently breached and stolen data from software company MeridianLink. The ransomware gang said it breached MeridianLinks network on November 7 and stole company data without encrypting systems, according to DataBreaches.net . It gave the victim a 24-hour deadline to pay a ransom before it would publish the information. Whilst MeridianLink reportedly reached out to BlackCat/APLHV initially, the group said it has not received communications to begin negotiations about payment in exchange for not leaking the supposedly stolen data. Victims lack of response likely prompted SEC complaint This alleged lack of response appears to have prompted the hackers to exert more pressure by sending the complaint to the SEC about the incident that impacted customer data and operational information. BlackCat/APLHV published a screenshot of the form they filled out on SECs Tips, Complaints, and Referrals page. However, the boldness of BlackCat/APLHV may be misjudged, as the newly-formed cyber attack notification rule (Form 8-K, under Item 1.05) that it accuses MeridianLink of breaking does not actually come into force until next month (December 15). The SEC recently announced it would be adopting new rules that require publicly traded companies to report cyber...

... (truncated for display)