Portuguese newspaper Expresso fell victim to the Lapsus Group in January 2022.
The hackers hacked the newspaper's website and Twitter account and changed some links displayed on the profile to the group’s channel in the Telegram messaging app.
They also threatened that they will leak data if the ransom is not paid to them.
TPRM report: https://www.rankiteo.com/company/expresso
"id": "exp191121422",
"linkid": "expresso",
"type": "Ransomware",
"date": "1/2022",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"
{'affected_entities': [{'industry': 'Media',
'location': 'Portugal',
'name': 'Expresso',
'type': 'Newspaper'}],
'attack_vector': ['Website Compromise', 'Social Media Account Takeover'],
'date_detected': 'January 2022',
'description': 'Portuguese newspaper Expresso was hacked by the Lapsus Group '
"in January 2022. The hackers compromised the newspaper's "
'website and Twitter account, changing links to direct to the '
"group's Telegram channel. They threatened to leak data if a "
'ransom was not paid.',
'impact': {'data_compromised': 'Potential Data Leak',
'systems_affected': ['Website', 'Twitter Account']},
'motivation': 'Ransom',
'threat_actor': 'Lapsus Group',
'title': 'Hack of Portuguese Newspaper Expresso by Lapsus Group',
'type': 'Hack'}