Login
iscover
Share this article on:
Powered by
MOMENTUM
MEDIA
Powered by MOMENTUMMEDIA
The NSW-based coal mining equipment supplier was listed on RansomHub’s darknet leak site last month, and more than 500 gigabytes of allegedly stolen data were published.
The RansomHub ransomware gang has listed coaling mining equipment supplier Bis Industries as a victim on its darknet leak site.
The initial leak post was published on 17 February and has been viewed 7.268 times since then, according to a ticker on RansomHub’s leak site.
The gang claims to have stolen 502 gigabytes of data.
Bis Industries has confirmed it is investigating a cyber security incident that it first detected last year.
“Bis Industries experienced a ransomware incident in December 2024 when an unauthorised third party accessed and encrypted a part of our IT systems,” a Bis Industries spokesperson told Cyber Daily.
“As soon as we became aware, we immediately engaged leading cyber experts to provide us advice. Our cyber experts were able to quickly contain the incident and restore our systems, with little impact to our operations.”
Bis is also aware of RansomHub’s claims and is actively investigating the gang’s allegations.
“Recently, Bis was made aware of an allegation on the dark web that some of our data was stolen by the unauthorised third party as part of the incident. Since then, Bis has been working with its cyber experts to urgently investigate these allegations,” the spokesperson said.
This investigation is ongoing, and Bis is taking the hackers’ allegations seriously.
“We apologise for any concern this incident may have caused and will keep our stakeholders updated on our investigation.”
Since Cyber Daily first became aware of RansomHub’s claims, the gang has now published the complete dataset to its darknet leak site.
RansomHub has become one of the most prolific hackers in the ransomware sphere since it first emerged in early 2024. Since February last year, the gang has claimed attacks on 719 victims, placing it well within the top 10 most active groups of all time.
As a ransomware-as-a-service operation, RansomHub offers its malware to a raft of affiliates who are expected to operate via the gang’s rules – no attacks on public hospitals, no follow-up attacks on companies that have already paid a ransom, and no attacks on organisations within the Confederation of Independent States, Cuba, North Korea, or China.
“Our team members are from different countries and we are not interested in anything else, we are only interested in dollars,” the gang said on its About page.
Bis Industries offers a range of coal mining equipment for hire, as well as mining services offered via its UGM brand. The company employs more than 500 people and has its head office in North Sydney, as well as locations in Tomago and Cardiff in NSW and Paget in Queensland.
David Hollingworth has been writing about technology for over 20 years, and has worked for a range of print and online titles in his career. He is enjoying getting to grips with cyber security, especially when it lets him talk about Lego.
Be the first to hear the latest developments in the cyber industry.
