Trending

ee-track">
Link copied!

Interstate Restoration Got Allegedly Breached by Maze Ransomware Operators

In today’s world, ransomware attacks are tending to become more disruptive which has been the reason for the downfall of many organizations. According to Hartford, 31% of all data breaches are in organizations having fewer…

August 17, 2020 · 2 min read

In today’s world, ransomware attacks are tending to become more disruptive which has been the reason for the downfall of many organizations. According to Hartford, 31% of all data breaches are in organizations having fewer than 100 employees, and about 66% of all data breaches investigated were not discovered for months, or sometimes even years.

During the monitoring of deepweb and darkweb leaks, our researchers came across the leak disclosure post in which the Maze ransomware operators claim to have breached Interstate Restoration and claimed to be in possession of the company’s sensitive data.

Established in the year 1998, Interstate Restoration one of the leading full-service emergency response restoration and reconstruction companies based in the United States of America. With over 450 employees the company has been earning annual revenue of around $127 million.

Below is the snapshot of the leak post published by the Maze Ransomware Operators-:

Screen Shot 2020 08 17 at 9.32.27 am

After analysing the company’s leaked data of around 800 MB, our researchers gathered some of critical information as detailed below-:

  • Details of Current and former employees which includes employment agreements forms, background checks, healthcare documents, and much more.
Screen Shot 2020 08 17 at 8.58.50 pm
Screen Shot 2020 08 17 at 10.02.26 am
  • Acquisition documents of InStar Services Group which include bank payoff letter, trademarks agreement, Asset purchase agreements.
Screen Shot 2020 08 17 at 9.00.00 pm

Screen Shot 2020 08 17 at 9.02.23 pm 1
  • Networking routing diagrams of the company.
Screen Shot 2020 08 17 at 8.54.05 pm
  • Cost status report and invoices of the company.
Screen Shot 2020 08 17 at 9.01.13 pm
  • Currently, the ransomware operators claims to have published 5% of company’s total data leak.

Cyble has been reporting these data breaches to aware individuals of the risks associated with using online services.

report-ad-banner

We recommend people to:

  • Never share personal information, including financial information over the phone, email or SMSs
  • Use strong passwords and enforce multi-factor authentication where possible
  • Regularly monitor your financial transaction, if you notice any suspicious transaction, contact your bank immediately.
  • Turn-on automatic software update feature on your computer, mobile and other connected devices where possible and pragmatic
  • Use a reputed anti-virus and internet security software package on your connected devices including PC, Laptop, Mobile
  • People who are concerned about their exposure in darkweb can register at AmiBreached.com to ascertain their exposure.

About Cyble

Cyble is an Atlanta, US-based, global premium cyber-security firm with tools and capabilities to provide near real-time cyber threat intelligence

Cyble Inc.’s mission is to provide organizations with a real-time view of their supply chain cyber threats and risks. Their SaaS-based solution powered by machine learning and human analysis provides organizations’ insights to cyber threats introduced by suppliers and enables them to respond to them faster and more efficiently.

This monitoring and notification platform gives the average consumer insights into their personal cybersecurity issues, allowing them to take action then as needed. It has recently earned accolades from Forbes as being the top 20 cyber-security companies to watch in 2020. 

AI Threat Intelligence

Stop Executive Threats
Before They Strike

Monitor dark web chatter, detect lookalike domains, and protect your C-suite from targeted impersonation — in real time, across 50+ countries.

Scroll to Top

Book your session

Request a Personalized Demo

See how Cyble's threat intelligence protects your organization. A specialist will reach out within one business day.

Select one or more options

Cyble protects your personal data to manage your account and deliver requested content. Submit your details to receive updates. Withdraw consent anytime. See our privacy policy for details.

Your information is encrypted and never shared.
SOC 2 Type II GDPR compliant Trusted by 1,000+ teams

Download the brochure

Get the Cyble Vision Brochure

Explore how Cyble Vision delivers AI-powered threat intelligence across your attack surface. Fill in your details to access the brochure.

Select one or more options

Cyble protects your personal data to manage your account and deliver requested content. Submit your details to receive updates. Withdraw consent anytime. See our privacy policy for details.

Your information is encrypted and never shared.
SOC 2 Type II GDPR compliant Trusted by 1,000+ teams