Share this article on:
Australian not-for-profit ANU Enterprise (ANUE) has confirmed a ransomware attack on its systems.
Last week, the Australian National University subsidiary was listed on the dark web leak site of the ThreeAM ransomware gang.
The threat actor gave no information as to the nature of the incident other than 0 per cent of the allegedly exfiltrated data has been published.
Now, ANU has confirmed that ANUE has suffered a ransomware incident and that its systems were accessed.
“The university can confirm that our wholly owned subsidiary, ANU Enterprise, recently suffered a ransomware incident,” an ANU spokesperson told Cyber Daily.
“The incident resulted in the encryption and exfiltration of some files stored on the ANU Enterprise IT Systems.”
ANU stressed that ANUE’s systems are entirely separate from the university’s and that “no internal ANU systems were impacted.”
Upon identifying the issue, ANUE notified the Australian Cyber Security Centre and worked with the ANU Information Security team to restore any impacted systems and files.
ANU also said that it has notified those impacted and that it has not paid a ransom.
“The university takes cyber security and all reports of possible data breaches seriously. The university is dedicated to safeguarding data across all areas of the organisation, including its subsidiaries,” the spokesperson said.
“ANU Enterprise, in conjunction with the ANU Information Security Office, is actively reviewing this incident to recommend additional information security measures that will be implemented going forward.”
At the time of writing, Cyber Daily has observed that the ThreeAM ransomware gang is still yet to publish any data or update its page to provide additional information.