In a stunning development, it has been alleged that the notorious ALPHV/BlackCat ransomware cartel has obtained sensitive data from accounting software provider Tipalti, potentially putting the data of Roblox and Twitch at risk. The cybercriminals reportedly breached Tipalti’s systems, gaining access to a vast amount of company information.
ALPHV Ransomware Targets Tipalti
The dark web blog used by the ALPHV ransomware cartel has posted Tipalti as one of its latest victims. Tipalti, a Canada-based accounting software fintech, has seemingly caught the attention of these cybercriminals.
Timeline of the Breach
According to the claims made by the cybercriminals, they managed to infiltrate Tipalti’s network in early September. Shockingly, they remained undetected for several months, giving them ample time to exfiltrate over 265 GB of highly sensitive company data.
Tipalti is known for providing businesses with accounts payable, procurement, and global payments automation software. With access to such a large volume of sensitive data, the breach poses a significant threat to the privacy and security of not only Tipalti, but also its clients.
ALPHV’s Targeted Strategy
ALPHV’s dark web blog post suggests a deliberate targeting of not just Tipalti, but also recognizable brands like Roblox and Twitch. It appears that the cybercriminals aim to use these high-profile examples to threaten Tipalti and potentially expose data from other customers.
Threats to Roblox
Roblox, a popular game platform and game creation system, has also found itself separately targeted by the ALPHV ransomware cartel. The cybercriminals have explicitly stated their intention to “individually extort affected parties such as their creators.” This comes after an earlier breach in early July 2022, where internal documents of Roblox Corporation were leaked online.
ALPHV/BlackCat Ransomware Operation
ALPHV operates as a Ransomware-as-a-Service (RaaS) business, selling malware subscriptions to criminals. Their activities have been highly active over the past 12 months, victimizing over 320 organizations worldwide, according to Ransomlooker, Cybernews’ ransomware monitoring tool.
The alleged breach of Tipalti by the ALPHV/BlackCat ransomware cartel has sent shockwaves through the cybersecurity world. The potential exposure of data from Roblox, Twitch, and other unsuspecting victims raises concerns over privacy and security for individuals and businesses alike. It serves as a stark reminder of the constant threat posed by cybercriminals and the need for robust security measures to prevent such breaches in the future.