Share this article on:
The Medusa ransomware gang has claimed a cyber attack on an Australian tiling, flooring and waterproofing company.
ARDEX Australia was listed on the threat group’s dark web leak site on 27 January, with Medusa claiming to have stolen business documents containing business and personal information.
The group posted a comprehensive sample of the allegedly exfiltrated data, which includes spreadsheets, product lists, prices, remuneration documents, employment and position documents, policy documents, emails and other documents, some of which are marked confidential.
Within those documents, data includes personal data, including names, email addresses and phone numbers.
Medusa set a countdown for the release of the data for roughly 22 days. It has also set the purchase price at $300,000, the same price as for deletion. They have also allowed for time to be added to the countdown for $10,000.
Cyber Daily has reached out to ARDEX for comment on the incident.
Late last year, Medusa claimed a cyber attack on Australia-operated digital slots and gaming machine manufacturer Ainsworth Game Technology.
On 10 December, the Medusa ransomware gang listed Ainsworth Game Technology on its dark web leak site, claiming to have exfiltrated 852.40 gigabytes of data.
It also posted a sample of the data, which contains alleged business documents and confidential business information, personal employee data, including first and last names, dates of birth, email addresses, bank account numbers, tax ID numbers and cards, passports and passport numbers, and more.
The data pertains to Ainsworth operations from all around the world, with a significant portion of the data being Australian.