Illustration: JMiks | Shutterstock
The RansomHub hacking group has claimed responsibility for an alleged data breach at BC Jindal Group, a prominent Indian conglomerate. The cybercriminals allege they have exfiltrated 140 GB of sensitive data from the company’s systems.
The exact nature of the stolen data is still unclear, but data breaches typically involve confidential business information, financial data, and other sensitive information, including employee data that contains personally identifiable information (PII). The stolen data may also include customer information from individuals or businesses.
RansomHub has not revealed whether negotiations for the ransom are ongoing or whether the data is at risk of being publicly exposed.
BC Jindal Group was founded in 1952 and employs more than 10,000 people across India, the United States, and Europe. The group consists of JPFL Films Private Limited, Jindal Poly Films Limited, Jindal (India) Limited, Jindal India Power Limited, and Jindal India Renewable Energy Limited.
RansomHub is one of the new entrants in the hacking industry. Following the FBI crackdown on the ALPHV/BlackCat ransomware, RansomHub emerged as a ransomware-as-a-service (RaaS). The ransomware group is also suspected to be a part of ShadowSyndicate, a club of various ransomware groups such as Quantum, Nokoyawa, and ALPHV.
In September 2024, Halliburton, one of the world’s largest energy companies suffered a ransomware attack. Cyber security experts suspected that RansomHub was behind that incident.
Similarly, in May 2024, one of the most prestigious and largest auction houses Christie’s suffered a ransomware attack by the RansomHub group. The attack forced Christie’s to shut down its website for ten days.
In July 2024, RansomHub targeted Rite Aid, the third-largest pharmacy company in the United States, affecting 2.2 million customers. However, the company stated that the operators did not access Social Security numbers, health data, or financial records.
In the News: 70 Indians rescued from KK Park cybercrime hub in Myanmar
