California Department of Finance

The Finance Department for the state of California was a recent target of Lockbit, the notorious Russian-linked ransomware group.

The group allegedly posted on the dark web to threaten them that if the ransom demands aren’t met by December 24, they will leak the stolen data.

The hackers also published online the number of directories and files that contained over 246,000 files and over 114,000 folders totalling 75.3GB of data, as displayed in the properties dialogue.

However, an initial access broker (IAB) was offering a way past the department’s cyber defences for $30,000 per breached server.

Source: https://heimdalsecurity.com/blog/california-state-finance-department-lockbit-ransomwares-latest-victim/

TPRM report: https://scoringcyber.rankiteo.com/company/california-department-of-finance

"id": "cal2251141222",
"linkid": "california-department-of-finance",
"type": "Ransomware",
"date": "12/2022",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Public Administration',
                        'location': 'California',
                        'name': 'Finance Department for the state of '
                                'California',
                        'type': 'Government'}],
 'data_breach': {'data_exfiltration': 'Yes',
                 'number_of_records_exposed': '246,000 files and 114,000 '
                                              'folders'},
 'description': 'The Finance Department for the state of California was '
                'targeted by Lockbit, a Russian-linked ransomware group. The '
                'group threatened to leak stolen data if ransom demands '
                "weren't met by December 24. The hackers published details of "
                'the stolen data, including 246,000 files and 114,000 folders '
                'totaling 75.3GB. An initial access broker was offering access '
                "to the department's cyber defenses for $30,000 per breached "
                'server.',
 'impact': {'data_compromised': '246,000 files and 114,000 folders totaling '
                                '75.3GB'},
 'motivation': 'Financial',
 'ransomware': {'data_exfiltration': 'Yes', 'ransomware_strain': 'Lockbit'},
 'threat_actor': 'Lockbit',
 'title': 'Ransomware Attack on California Finance Department',
 'type': 'Ransomware'}