Breach report · Finance

New Ransomware Group Attacks 6 Person, Canadian Small Business

A ransomware group encrypted the servers of a six-person North York financial firm and stole 5GB of data, publishing it in stages when the firm stayed silent.

Naz Sukhram Financial, a six-person operation in North York, confirmed they were hit with Ransomware on May 26 after finding their servers had been encrypted.

Owner, Naz Sukhram, whom the firm is named after, released a statement saying, “We thought we were a small company and would not get hit.”

The Ransomware group claiming responsibility for the attack shared files posted on its data leak website providing evidence of the stolen data. Included were screenshots of text conversations Sukhram recalled having with an employee. Further screenshots showed the proclamation of the gang’s intention, “The network of Naz financial was screwed, and now we have about 5 GB data from the file servers, including internal company documents, personal and customer data. According to our rules we are publishing this data step by step in case if this company will keep silence.”

Questions are still unanswered as details of the stolen data and the ransom amount have yet to be disclosed. When asked about how the group was able to deploy their malware and compromise the financial company’s network Sukhram said they are “not sure yet, we have to wait for the insurance company to send an investigator. We don’t know if anything was stolen, or just encrypted.”

While the small business waits to find answers their business has been put on an indefinite pause as IT support tries to retrieve their server’s data. Employees have been told to monitor their financial statements and Sukhram says they hopeful to “be back up and running within a couple of weeks.”

More from the feed

Other incidents we've written up.

Want to know what this would look like for you?

A 30-minute call. No slides, no audit fee, no obligation. We ask what is breaking and tell you honestly whether we are the right fit.