Foxtons

Foxtons Group was targeted in a ransomware attack that affected its mortgage broking business, Alexander Hall, and exposed the financial details of 16,000 customers.

The attackers accessed one of its databases containing sensitive personal details and obtained the card details, addresses, and private correspondences (including details of fees paid) of customers who had used its service before 2010.

They also leaked data representing just one percent of the information they stole in the attack.

The estate agency did not inform potential victims or the ICO, but the Alexander Hall internally investigated the incident to know the extent of breach.

Source: https://www.itgovernance.co.uk/blog/foxtons-estate-agency-leaked-thousands-of-customers-financial-records

TPRM report: https://www.rankiteo.com/company/foxtons

"id": "fox221622",
"linkid": "foxtons",
"type": "Ransomware",
"date": "6/2010",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'customers_affected': 16000,
                        'industry': 'Finance',
                        'name': 'Alexander Hall',
                        'type': 'Mortgage Broking Business'}],
 'data_breach': {'data_exfiltration': True,
                 'number_of_records_exposed': 16000,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Card details',
                                              'Addresses',
                                              'Private correspondences',
                                              'Details of fees paid']},
 'description': 'Foxtons Group was targeted in a ransomware attack that '
                'affected its mortgage broking business, Alexander Hall, and '
                'exposed the financial details of 16,000 customers.',
 'impact': {'data_compromised': ['Card details',
                                 'Addresses',
                                 'Private correspondences',
                                 'Details of fees paid']},
 'investigation_status': 'Internally Investigated',
 'ransomware': {'data_encryption': True, 'data_exfiltration': True},
 'title': 'Foxtons Group Ransomware Attack',
 'type': 'Ransomware'}