25 June 21, 13:07
Quote:U.K.-based fashion brand French Connection, which advertises under the acronym “FCUK,” confirmed that it has been compromised by ransomware group REvil. Just hours later, Brazilian medical diagnostics firm Grupo Fleury announced it had the same misfortune.
The twin attacks reveal shifting strategies and motivations for one of the world’s most dangerous ransomware threat actors.
The prolific ransomware gang, which also goes by the moniker Sodinokibi, was able to breach French Connection’s back-end servers to steal the personal data of company executives.
The company confirmed the breach in a statement but stressed they have “no evidence” that customer data was compromised during the attack, adding that business is “continuing to operate largely as normal.”
Passport and identification card scans for the company’s top executives, founder and CEO Stephen Marks, CFO Lee Williams and COO Neil Williams, were among the stolen files, The Register confirmed.
“As soon as it became aware of the breach, the company took immediate action, suspending all affected systems and engaging third-party experts to assist with resolving the situation,” French Connection’s statement continued. “The company is now actively working to restore its systems as quickly and safely as possible, and where necessary, is using manual overrides in order to ensure that the company can continue to operate.”
Read more: Oh FCUK! Fashion Label, Medical Diagnostics Firm Latest REvil Victims | Threatpost