Video: Brain Cipher Ransomware Hacks Deloitte

all right everybody uh we're we got our notes we've been working on this script all week so I think we're ready to record and get this over to the editing Team all right so let's get ready in three two ah what are you talking about we we got this we got the script we got our notes we got everything ready to go what do you mean there's something that's more important what do you mean deoe got hacked when did this happen seriously okay well it looks like we have another major cyber security incident just in time for the holidays stick around to find out more what's up everybody welcome back to East security Planet your go-to channel for everything cyber security I'm your host Davin Jackson and I guess we're going to be keeping up with additions in this video if you don't know what I mean just about every year since 2017 right before the holiday season approaches a significant cyber incident leaves the cyber security community and the people affected limping into the new year if you think I'm joking let's run down a quick list in 2017 while we were still sorting out the mess from the the Equifax breach several medical facilities were attacked and eBay exposed customer records on Google these records were a previous breach that dated back to 2014 2018 brought us a massive Marriott breach that exposed half a billion customer records and the Kor breach had affected 100 million users 2019 saw major breaches from Capital 1 and State Farm earlier in the year but it was a relatively quieter December at least State side then came 2020 the year has forever etched in cyber security history the solar winds hack that exposed sensitive data from numerous US government agencies and private companies 2021 was marked by a surgeon ransomware attacks targeting various companies including Shutterfly and Kronos Comcast was hacked and several cryptocurrency platforms were robbed of their money 2022 saw more ransomware attacks on companies like Rackspace btc.com and Comcast Xfinity and then there was the global scramble to address the critical log for J vulnerability which is expose countless systems of potential exploitation last year was another busy year for cyber criminals companies like mintmobile Sony's Insomniac Games HTC Global Services and even craft Hinds a company that's best known for condiments like ketchup relish and were're hit with ransomware attacks resulting in significant data breaches so already in a year full of events that I don't think anyone had on their bingo card news came out earlier this week about a ransomware group breaching one of the world's largest Professional Services companies a notorious ransomware group known as brain Cipher now if the name sounds familiar that's because it is brain Cipher is a cyber crime group that was responsible for the Indonesian National Data Center attack earlier this year that affected over 200 government agencies even though they later returned the decryption keys for no fee and this time they claimed to have successfully breach deoe UK's systems and stole over one terabyte of compressed sensitive data the massive data call potentially includes confidential client information Financial records and proprietary business strategies in a post on their dark web website brain Cipher claims to have exposed critical vulnerabilities in deoe UK security infrastructure and has also issued a warning to the company the post says unfortunately giant companies do not always do their job well using the example of the results of this company you can draw certain conclusions one how the elementary points of information security are not observed two we will compare the contract between the customer and the contractor delight.com with the results of its execution number three we will show excellent not monitoring work and tell what tools we used and use there today hinting that they may still have access to Theo's Network they continue on to say soon we will tell you about this incident we will provide an example of data that has leaked the volume of compressed data is more than one tbte brain Cipher has given deoe a deadline of December 15th to respond and meet their demands in a statement to cyber daily deoe said the following our investigation has found no threat to client data or other sensitive data related to this incident it's not quite a confirmation of a breach but it's also not a Flatout denial either however if this is true the Cyber attack of this magnitude could have severe repercussions as it could lead to reputational damage Financial losses and legal liabilities but Additionally the exposure of sensitive data can compromise the privacy and security of individuals and organizations now the investigation is still early and it remains to be seen how deoe will respond to this crisis but according to brain Cipher the clock is ticking as for the rest of us it's a stark reminder that all organizations from the biggest professional service companies in the world to small mom and pop businesses must prioritize cyber security and invest in defense mechanism to protect themselves from Cyber attack at all times apparently even on the holidays let us know in the comments do you think brain Cipher really has all the data they claim to have and if they do do you think deoe should pay the ransom subscribe to our channel for the latest updates on this and other cyber security news and don't forget to sign up for our cyber security Insider newsletter thanks for watching ecurity Planet I'm Davin Jackson and apparently I have a lot of work to do so until next time stay informed stay secure and stay safe another breach another holiday

This transcript was generated automatically from the video's captions and may contain errors.