The BlackCat/ALPHV ransomware gang asserts that a cyberattack on Reddit resulted in the theft of 80GB of data.
Attackers were able to acquire unauthorized access to some corporate systems, code, and internal documents.
The business disclosed that it had been the victim of a well-planned, highly-targeted attack. The company's employees became the subject of a carefully planned phishing operation.
Reddit user passwords and accounts were not compromised, according to the business.
Source: https://securityaffairs.com/147591/data-breach/reddit-files-blackcat-alphv-ransomware.html
TPRM report: https://scoringcyber.rankiteo.com/company/reddit-com
"id": "red72619923",
"linkid": "reddit-com",
"type": "Ransomware",
"date": "02/2023",
"severity": "100",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"
{'affected_entities': [{'industry': 'Social Media',
'name': 'Reddit',
'type': 'Company'}],
'attack_vector': 'Phishing',
'data_breach': {'data_exfiltration': True,
'type_of_data_compromised': ['Corporate systems',
'Code',
'Internal documents']},
'description': 'The BlackCat/ALPHV ransomware gang asserts that a cyberattack '
'on Reddit resulted in the theft of 80GB of data. Attackers '
'were able to acquire unauthorized access to some corporate '
'systems, code, and internal documents. The business disclosed '
'that it had been the victim of a well-planned, '
"highly-targeted attack. The company's employees became the "
'subject of a carefully planned phishing operation. Reddit '
'user passwords and accounts were not compromised, according '
'to the business.',
'impact': {'data_compromised': ['Corporate systems',
'Code',
'Internal documents']},
'initial_access_broker': {'entry_point': 'Phishing'},
'motivation': 'Data Theft',
'ransomware': {'data_exfiltration': True,
'ransomware_strain': 'BlackCat/ALPHV'},
'threat_actor': 'BlackCat/ALPHV',
'title': 'BlackCat/ALPHV Ransomware Attack on Reddit',
'type': 'Ransomware'}