Original Release Date: 12/2/2019
Cyber-criminals conducting ransomware attacks frequently threaten victims with releasing stolen data if the ransom is not paid; in most cases, these threats are not credible. However, the threat actors behind a Maze ransomware incident at Allied Universal, a large security staffing firm, released 700 MB, about 10 percent, of the company's stolen data when a $2.3 million demand was not paid. The breached data included sensitive employee and business information. Organizations are urged to consider revising their incident response plans to include this new tactic. Additional details can be found in the Bleeping Computer article.