In the last week, officials for the Russian vodka-maker, Stoli have filed for bankruptcy in the wake of a ransomware attack that brought down their production facilities and disabled their ERP system. The initial ransomware attack took place back in August, and with several months of manual entry-only documentation and an inability to restore any of their offline systems until early-2025, the company was facing significant debt increases. This incident, along with sanctions from Russia, due to the company’s support of Ukraine have resulted in financial decline.
RansomHub targets Bologna Football Club
The threat actors behind the notorious ransomware group, RansomHub have recently published a data trove of stolen information belonging to the Italian football club, Bologna FC. The attack occurred on November 19th and allowed threat actors to access a significant amount of confidential player information including contract details, medical records, and other sensitive information on Bologna FC employees. With the information being published, it is believed that Bologna FC refused to pay the ransom demanded, even within the extended timeframe, and negotiations have failed.
German law enforcement takes down Crimenetwork marketplace
Officials for the German police have recently confirmed that they successfully completed an operation to take down one of the country’s largest dark web marketplaces, Crimenetwork and made arrests on suspected administrators of the site. Along with taking down the servers for the site, law enforcement also seized several high-value vehicles, and more than $1million in cryptocurrency that was used for purchasing illegal goods and services. Crimenetwork is the third dark web marketplace operating in Germany that has been successfully taken offline, with Crimemarket closing in March and Kingdom Market being seized in December 2023.
ENGlobal Corporation suffers ransomware attack
At the beginning of last week, one of the largest energy industry contractors in the world, ENGlobal Corporation identified a cybersecurity intrusion on their internal network, which was later confirmed to be ransomware. While the investigation has confirmed that several of their systems had been encrypted, it is still unclear if any information was exfiltrated or which ransomware group may be responsible for this attack.
Wirral University Teaching Hospital faces cyberattack outages
Recently, one of the largest UK healthcare providers within the NHS Foundation Trust, Wirral University Teaching Hospital (WUTH) began suffering IT outages due to a cyberattack on their systems. After identifying the intrusion, WUTH staff quickly began taking other systems offline to avoid any additional damage, and increased wait times for patients. Fortunately, operations at WUTH are still functional and patients are still able to make and attend appointments, though access to patient records is still not possible due to the electronic nature of record-keeping.
