Paradies Shops

Paradies Shops, a North American airport retail company, has agreed to pay $6.9 million to resolve a class-action lawsuit tied to a 2020 REvil ransomware attack. The attack compromised the personal data of 76,000 current and former employees. It is alleged in the lawsuit that Paradies was negligent in adequately securing its employees' data and further exposed its workers to harm by deferring notifications for eight months, and concealing the cause of the ransomware intrusion. The company has repudiated these claims, insisting that it chose to settle only to avoid further expenses.

Source: https://www.scworld.com/brief/paradies-shops-to-settle-ransomware-related-breach-for-6-9m

TPRM report: https://scoringcyber.rankiteo.com/company/life

"id": "lif502042125",
"linkid": "life",
"type": "Ransomware",
"date": "4/2025",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Airport Retail',
                        'location': 'North America',
                        'name': 'Paradies Shops',
                        'type': 'Retail Company'}],
 'data_breach': {'number_of_records_exposed': '76,000',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High'},
 'description': 'Paradies Shops, a North American airport retail company, has '
                'agreed to pay $6.9 million to resolve a class-action lawsuit '
                'tied to a 2020 REvil ransomware attack. The attack '
                'compromised the personal data of 76,000 current and former '
                'employees. It is alleged in the lawsuit that Paradies was '
                "negligent in adequately securing its employees' data and "
                'further exposed its workers to harm by deferring '
                'notifications for eight months, and concealing the cause of '
                'the ransomware intrusion. The company has repudiated these '
                'claims, insisting that it chose to settle only to avoid '
                'further expenses.',
 'impact': {'data_compromised': "76,000 current and former employees' personal "
                                'data',
            'financial_loss': '$6.9 million',
            'legal_liabilities': 'Class-action lawsuit'},
 'motivation': 'Financial Gain',
 'ransomware': {'ransomware_strain': 'REvil'},
 'threat_actor': 'REvil',
 'title': 'Paradies Shops Ransomware Attack',
 'type': 'Ransomware'}