NSW Labor, the Australia’s Labor Party (New South Wales Branch) was targeted by the Now Avaddon threat actors after they have hacked them and stolen data.
The threat actors encrypted files and exfiltrated copies of files and also posted a number of files containing the personally identifiable information as proof of their claims.
It was basically a Distributed Denial of Service” attack but the hackers gave 240 hours to communicate and cooperate or else they will leak valuable company documents.
Source: https://www.databreaches.net/au-avaddon-threat-attackers-demand-ransom-from-nsw-labor/
TPRM report: https://scoringcyber.rankiteo.com/company/nsw-labor
"id": "nsw234431122",
"linkid": "nsw-labor",
"type": "Breach",
"date": "05/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Politics',
'location': 'New South Wales, Australia',
'name': 'NSW Labor',
'type': 'Political Party'}],
'attack_vector': 'Phishing',
'data_breach': {'data_encryption': 'Yes',
'data_exfiltration': 'Yes',
'personally_identifiable_information': 'Yes',
'type_of_data_compromised': 'Personally Identifiable '
'Information'},
'description': 'NSW Labor, the Australia’s Labor Party (New South Wales '
'Branch) was targeted by the Now Avaddon threat actors after '
'they have hacked them and stolen data. The threat actors '
'encrypted files and exfiltrated copies of files and also '
'posted a number of files containing the personally '
'identifiable information as proof of their claims. It was '
'basically a Distributed Denial of Service” attack but the '
'hackers gave 240 hours to communicate and cooperate or else '
'they will leak valuable company documents.',
'impact': {'data_compromised': 'Personally Identifiable Information'},
'motivation': 'Financial Gain',
'ransomware': {'data_encryption': 'Yes',
'data_exfiltration': 'Yes',
'ransomware_strain': 'Avaddon'},
'references': [{'source': 'Cyber Incident Description'}],
'threat_actor': 'Avaddon',
'title': 'NSW Labor Cyber Attack by Avaddon Threat Actors',
'type': ['Ransomware', 'Data Breach', 'DDoS']}