RansomHub Says 313GB Exfiltrated in Mexican Government Cyberattack
Ransomware gang RansomHub has claimed an attack on the Mexican government, claiming to have extracted data.
On November 15, the threat group listed the official Mexican government website on its website, claiming to have stolen 313 gigabytes of data.
“gob.mx is the platform that promotes innovation in government, drives efficiency and transforms processes to provide information, procedures and a platform for public participation,” the threat group said.
🚨 MEXICO ALERT 🚨
the group #RANSOMHUB has added the domain https://t.co/Wl9MrD3U2S as a new victim, reporting a leak of 313 GB of information.@ivillasenor @NicoTechTips
🔒 #ransomware | #Cybersecurity | #Infosec | #Government | #Data leak pic.twitter.com/zP0Ep91APA
— TIAL (@mbec03) November 15, 2024
RansomHub said the exfiltrated data contains “contracts, insurance, finances, confidential files” and posted a sample of the supposedly stolen data.
According to the list, the threat group specifically addressed the Legal Department of the Federal Executive Branch (CJEF).
Within the samples, the names, emails, roles, “RFCs” and photographs of CJEF staff members are listed, as well as a series of scanned contracts from 2023, one of which is addressed to Mario Gavina Morales, director of Foreign Affairs of the Mexican government. information and communications technologies.
The Mexican government has not yet issued a public statement regarding the incident; however, the website appears to be functioning normally.
RansomHub has set a deadline of 10 days to pay the ransom before the data is published.
