Exagrid, the backup appliance supplier fell prey to the Conti ransomware group.
The attackers infiltrated their network and encrypted file servers, SQL servers, and downloaded 800GB of important information.
The group demanded about $7,480,000 ransom in the starting which was then negotiated to $2.6 million to delete all the stolen data.
Source: https://www.computerweekly.com/news/252501665/Exagrid-pays-26m-to-Conti-ransomware-attackers
TPRM report: https://scoringcyber.rankiteo.com/company/exagrid-systems
"id": "exa3249322",
"linkid": "exagrid-systems",
"type": "Ransomware",
"date": "06/2021",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"
{'affected_entities': [{'industry': 'Backup Appliance Supplier',
'name': 'Exagrid',
'type': 'Company'}],
'data_breach': {'data_exfiltration': '800GB of important information'},
'description': 'Exagrid, the backup appliance supplier fell prey to the Conti '
'ransomware group. The attackers infiltrated their network and '
'encrypted file servers, SQL servers, and downloaded 800GB of '
'important information. The group demanded about $7,480,000 '
'ransom in the starting which was then negotiated to $2.6 '
'million to delete all the stolen data.',
'impact': {'data_compromised': '800GB of important information',
'financial_loss': '$2.6 million',
'systems_affected': ['file servers', 'SQL servers']},
'motivation': 'Financial',
'ransomware': {'data_encryption': ['file servers', 'SQL servers'],
'data_exfiltration': '800GB of important information',
'ransom_demanded': '$7,480,000',
'ransom_paid': '$2.6 million',
'ransomware_strain': 'Conti'},
'threat_actor': 'Conti ransomware group',
'title': 'Exagrid Ransomware Attack',
'type': 'Ransomware'}