Page 14 - IAV Digital Magazine #607

iAV - Antelope Valley Digital Magazine
Schneider Electric Ransomware Crew Pemands $125k Paid In Baguettes
By Jessica Lyons,
Schneider Electric confirmed that it is investigating a breach as a ran- somware group Hellcat claims to have stolen more than 40 GB of com- pressed data — and demanded the French multinational energy management company pay $125,000 in baguettes or else see
its sensitive customer and operational infor- mation leaked.
And yes, you read that right: payment in baguettes. As in bread.
Schneider Electric declined to
answer The Register's specific questions about the intrusion, including if the attackers really want $125,000 in
baguettes or if they would settle for cryp- tocurrency.
A ransomware crew called Hellcat claimed to have gained access to Schneider Electric's infrastructure via the $40-billion energy management giant's Atlassian Jira sys- tem.
"This breach has compromised critical
data, including proj- ects, issues, and plu- gins, along with over 400,000 rows of user data, totaling more than 40GB Compressed Data," the criminals post- ed on their leak site.
The miscreants also promised to delete the data as long as the French firm hands over the dough.
"Failure to meet this demand will result in the dissemination of the compromised information," they threatened. "Stating this breach will decrease the ransom by 50 percent, its [sic] your choice Olivier..."
"Olivier," we'd assume, is Olivier Blum, who, on Monday,
was announced as Schneider's new CEO. This is the
same day that Hellcat added the multinational to its site of shame, which doesn't make for a pleasant first week on the job.
Also on Monday, Hellcat leaked
data that the group claimed belonged to Jordan's Ministry of Education and Tanzania's College of Business Education.
This is Schneider Electric's third breach in less than two years. In February, Cactus
ransomware infect- ed the corporation's Sustainability Business division. And in June 2023, the French giant was among the thousands of organizations and millions of individuals whose data was stolen by the CL0P ransomware crew in the MOVEit attacks
iAV - Antelope Valley Digital Magazine