Hackers Declare to Have Stolen Prime Secret Paperwork From the U.S. Marshals Service

A hacking group claims to have stolen greater than 380 gigabytes of information from the U.S. Marshals Service, together with confidential and top-secret paperwork and data about gangs, energetic instances, and digital surveillance.

The ransomware group Hunters Worldwide took credit score for the breach and posted photos of the allegedly stolen data on its information leak web site, in accordance with the cybersecurity agency Hackmanac, which supplied screenshots of the submit to Gizmodo. In whole, the group claims to have exfiltrated greater than 327,000 information from the federal legislation enforcement company accountable for monitoring down fugitives and operating the witness safety program. The hackers set an August 30 deadline for a ransom to be paid.

A spokesperson for the U.S. Marshals Service informed Gizmodo he couldn’t but verify the breach’s authenticity however that the company was wanting into the claims. Along with screenshots of what it says are gang information and energetic case information, which seem to include headshots and different details about suspects, the hacking group additionally posted paperwork it claimed had been from “Operation Turnbuckle.” In 2022, upstate New York media retailers reported on a marshals operation by the identical identify that led to the arrest of greater than a dozen drug trafficking suspects.

If confirmed, this might be the second main breach of the Marshals’ pc techniques in as a few years. The company suffered a debilitating ransomware attack in February of 2023 that crippled a few of its techniques for months. It’s not instantly clear whether or not the information Hunters Worldwide claims to have stolen is related to that breach, mentioned Sofia Scozzari, the CEO of Hackmanac. Cybersecurity researchers first recognized Hunters Worldwide as a menace group in October 2023, about eight months after the U.S. Marshals Service ransomware assault

After Hunters Worldwide emerged on the scene, cybersecurity researchers speculated that it was a rebranding of the Hive ransomware group, which the FBI infiltrated and disrupted in a six-month investigation culminating in January 2023. Hunters Worldwide, nevertheless, claimed that it had merely bought Hive’s malware and improved upon it. Hackmanac has tracked 181 assaults related to the group concentrating on a variety of victims throughout personal trade and authorities.

The group provides ransomware-as-a-service, which means it sells and rents out its malware that infects a goal’s system and encrypts the information. The attacker then costs a payment to return entry to the information. About 75 % of the Hunters Worldwide assaults Hackmanac has documented contain ransomware, Scozzari mentioned, however in its posts in regards to the U.S. Marshals Service’s information the group didn’t declare to have encrypted the information along with stealing them, because it has completed beforehand.

“It’s clear that for Hunters, information is cash and the group’s principal focus is maximizing earnings” relatively than any political motivation, Scozzari mentioned. “On this regard, the extra delicate the stolen information, the better the possibilities of receiving a big fee.”