Share this article on:
Hackers claim to have stolen 700 gigabytes of data from the accounting firm, including personal data and financial information.
The BianLian ransomware group has listed Sydney-based accounting firm Hall Chadwick as a victim on its darknet leak site.
According to the leak post, the hackers have allegedly stolen 700 gigabytes of data, which includes personal data; accounting, budget, and financial data; email and msg archives; contract data and NDAs; files from the chief financial officer’s PC; and operational and business files.
“Data of this company will be available soon,” a BianLian spokesperson said in a 5 February post.
“It will be published block by block, so stay tuned for updates of this company daily.”
In addition, the group posted the business contacts of Hall Chadwick’s chief financial officer and general manager, as well as the personal and business contacts of the company’s chairman.
BianLian did not list its ransom demand nor when the complete dataset would be published. As of the time of writing, no data or evidence of the hack has been shared online.
Cyber Daily has reached out for comment from Hall Chadwick but has yet to receive a response.
Hall Chadwick is one of eight victims listed by BianLian this month. The gang was first observed in August 2022, and since then, it has claimed 428 victims, making it the number 10 most prolific ransomware operation by number of attacks. BianLian originally engaged in double-extortion tactics, both encrypting and exfiltrating a victim’s data, but in 2023, the FBI noted the gang had moved to a pure exfiltration and extortion model.
The gang’s most recent Australian victim was gold producer Evolution Mining in August 2024.
Despite the group’s name referencing a form of Chinese dramatic theatre, BianLian is thought to be based in Russia.
Hall Chadwick has offices in Sydney’s CBD and offers services relating to taxation, business insolvency, forensic accounting, and corporate governance. The firm works with companies in a range of sectors, including agriculture, healthcare, hospitality, and mining services.
David Hollingworth has been writing about technology for over 20 years, and has worked for a range of print and online titles in his career. He is enjoying getting to grips with cyber security, especially when it lets him talk about Lego.