Save the Children International

The charity organization Save the Children International revealed that it was targeted by a cyber attack.

The BianLian extortion ring claims to have stolen 6,8 TB of records, including multinational HR data and personal information. foreign emails, foreign medical and health records, and international financial data (more than 800 GB).

There has been no operational disturbance, and the company is still working as usual to create a better future for kids all over the world.

They put a lot of effort into understanding what transpired and what data was affected with the assistance of other experts so that they can take all necessary next measures.

Source: https://securityaffairs.com/150750/cyber-crime/save-the-children-cyber-attack.html

TPRM report: https://scoringcyber.rankiteo.com/company/save-the-children-international

"id": "sav10113923",
"linkid": "save-the-children-international",
"type": "Data Leak",
"date": "09/2023",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Non-profit',
                        'name': 'Save the Children International',
                        'type': 'Charity Organization'}],
 'data_breach': {'data_exfiltration': 'Yes',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['HR data',
                                              'Personal information',
                                              'Emails',
                                              'Medical and health records',
                                              'Financial data']},
 'description': 'Save the Children International was targeted by a cyber '
                'attack. The BianLian extortion ring claims to have stolen 6.8 '
                'TB of records, including multinational HR data and personal '
                'information, foreign emails, foreign medical and health '
                'records, and international financial data (more than 800 GB). '
                'There has been no operational disturbance, and the company '
                'continues to operate as usual.',
 'impact': {'data_compromised': ['Multinational HR data',
                                 'Personal information',
                                 'Foreign emails',
                                 'Foreign medical and health records',
                                 'International financial data'],
            'operational_impact': 'None'},
 'motivation': 'Data Theft',
 'references': [{'source': 'Save the Children International'}],
 'response': {'third_party_assistance': 'Yes'},
 'threat_actor': 'BianLian extortion ring',
 'title': 'Cyber Attack on Save the Children International',
 'type': 'Data Breach'}