A new ransomware group alleges to have stolen data from Sony Group Corporation. The group plans to sell the data but should no one buy the stolen information the group will release it and file a Data Privacy Law report to the General Data Protection Regulation agency.
According to a September 25 article from Australian cybersecurity publication Cyber Security Connect, the PlayStation maker was cracked open by Ransomed.vc, a new outfit of hackers that’s only been operating since September—though the publication suggests the gang has connections to previous dark web forums and groups. Cyber Security Connect reports that the hack allegedly unearthed screenshots of Sony’s internal log-in page, an internal PowerPoint presentation outlining test bench details, several Java files, and a document tree of the entire leak housing 6,000 files.
Ransomed.vc is aiming to sell the data: “We have successfully compromissed [sic] all of sony systems,” it says. “We wont ransom them! we will sell the data. due to sony not wanting to pay. DATA IS FOR SALE.” Apparently, the group backs up its claims with some “proof-of-hack data”, which includes screenshots of an internal log-in page, PowerPoint presentation, Java files, and a file tree, which apparently consists of fewer than 6,000 files. Cyber Security Connect notes this seems low for “all Sony systems”.
Sony has not publicly commented on the breach or the nature of Ransomed.vc’s impact on the company just yet.
