ZircoDATA hit by Black Basta ransomware
Learn More
ZircoDATA, an Australian-based data management company, fell victim to a ransomware attack orchestrated by the Black Basta ransomware gang.
The incident was publicly disclosed on February 22, 2024, when Black Basta claimed responsibility for the cyber attack, alleging to have accessed 395 gigabytes of sensitive data from ZircoDATA. This compromised data reportedly includes a variety of documents including:
- financial records,
- personal user folders
- confidentiality agreements.
Black Basta also claims to have obtained highly sensitive documents, including passport scans and immigration documents, featuring Australian ImmiCard numbers. The attackers have posted a substantial volume of documents online including at least 46 passport scans and 12 immigration cards. Some of these documents belong to current or former members of ZircoDATA’s C-suite and partners at US equity firm Housatonic Partners, a majority shareholder in ZircoDATA.
The ransomware group set a deadline for March 1, 2024, for ZircoDATA to pay the ransom to prevent further data disclosure.
ZircoDATA has been actively addressing the situation since the discovery of the network intrusion on February 8, 2024, which led to the encryption of some files. No details about number of affected individuals nor confirmation of leaked data is issued by the company.