22 June 2021

Ragnar Locker gang leaks 700GB of files stolen from ADATA


Ragnar Locker gang leaks 700GB of files stolen from ADATA

The Ragnar Locker ransomware group has published over 700GB of data allegedly stolen from Taiwanese memory and storage chip manufacturer ADATA.

Over the weekend, the gang published download links for 13 password-protected archives, allegedly containing sensitive ADATA files, on its leak site, according to BleepingComputer.

The ransomware attack on ADATA took place last month, on May 23, and forced the chip maker to shut down some of the affected IT systems. While the company did not reveal who was behind the attack, the Ragnar Locker gang took responsibility for the intrusion and published some screenshots of files and documents allegedly stolen from ADATA.

The group claimed to have stolen 1.5TB of sensitive data, including financial documents, contracts, non-disclosure agreements, and other files.

It appears that ADATA refused to pay the ransom and restored the affected systems on its own.

The archives with stolen ADATA files were initially hosted on the popular MEGA storage service, but the platform blocked access to the files and closed the group's account.

The recently leaked set of files is the second collection of archives allegedly containing stolen ADATA documents shared by Ragnar Locker. Earlier this month, the group released 4 small 7-zip archives that can still be downloaded.


Back to the list

Latest Posts

North Korean hackers target South Korean defense contractors

North Korean hackers target South Korean defense contractors

Lazarus, Kimsuky, and Andariel are believed to be behind the cyber intrusions.
23 April 2024
US imposes visa restrictions on individuals linked to commercial spyware

US imposes visa restrictions on individuals linked to commercial spyware

The announcement follows the implementation of a new policy by the US government over two months ago.
23 April 2024
Threat actor uses Signal spear-phishing to infect Ukrainian military personnel with malware

Threat actor uses Signal spear-phishing to infect Ukrainian military personnel with malware

The attack exploits a vulnerability in WinRAR software.
23 April 2024