Altus Group Ransomware Attack

Exploit: Ransomware Company: Altus Group Industry: Software Source: securityaffairs.co

One week after suffering a security breach, Toronto-based commercial real estate software solutions company Altus Group reported finding “no evidence of impact.” However, just one day later, the organization’s back-office and communications systems (including email) were taken offline.

While the initial reports stated that no data was stolen, it is speculated that a ransomware group named Hive may have encrypted and leaked Altus Group’s data online, giving them a chance to pay a ransom. Hive claimed to have published proof of what seems to be stolen data from Altus Group on their dark web page. Business data and other documents were among the allegedly stolen data files.

Further details have not yet been released and no ransom amount has been confirmed while the incident remains under investigation. It is not clear how long bad actors had access to Altus Group’s network or what percentage of files they were able to take from the company. Updates on the company’s website state that the organization has “retained a specialist firm to engage with the party behind the ransomware incident.” The updates also imply that the organization has paid an undisclosed ransom, stating, “After consultation with cybersecurity experts and advisors, to best protect the interests of our clients and employees, we cooperated with the party.”