Nexia

Nexia was targeted by the ransomware attack on November 2020.

The problem was handled by Systima, an outside IT consultant. According to a spokeswoman, a report from the company and a report from the Vocus exchange showed that no data had been exfiltrated.

Now that Nexia has paid the desired ransom or is in negotiations with the attackers, the listing for Nexia on the dark web's REvil operators' website has vanished as is customary.

Passwords were modified as part of the procedure, and servers and firewalls were patched. As per our established procedures, our systems are still being watched.

Source: https://itwire.com/business-it-news/security/melbourne-firm-denies-data-stolen-during-ransomware-attack.html

TPRM report: https://scoringcyber.rankiteo.com/company/nexia-international

"id": "nex23104623",
"linkid": "nexia-international",
"type": "Ransomware",
"date": "11/2020",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'name': 'Nexia', 'type': 'Company'}],
 'data_breach': {'data_exfiltration': 'No'},
 'date_detected': 'November 2020',
 'description': 'Nexia was targeted by the ransomware attack on November 2020. '
                'The problem was handled by Systima, an outside IT consultant. '
                'According to a spokeswoman, a report from the company and a '
                'report from the Vocus exchange showed that no data had been '
                'exfiltrated. Now that Nexia has paid the desired ransom or is '
                'in negotiations with the attackers, the listing for Nexia on '
                "the dark web's REvil operators' website has vanished as is "
                'customary. Passwords were modified as part of the procedure, '
                'and servers and firewalls were patched. As per our '
                'established procedures, our systems are still being watched.',
 'impact': {'data_compromised': 'No'},
 'motivation': 'Financial Gain',
 'ransomware': {'data_exfiltration': 'No',
                'ransom_paid': 'Yes',
                'ransomware_strain': 'REvil'},
 'response': {'enhanced_monitoring': 'Systems are still being watched',
              'remediation_measures': ['Passwords modified',
                                       'Servers and firewalls patched'],
              'third_party_assistance': 'Systima'},
 'threat_actor': 'REvil',
 'title': 'Ransomware Attack on Nexia',
 'type': 'Ransomware Attack'}