b2b-daily
Home | IT | Cyber Security

Notorious Ransomware Cartel Claims Breach of Tipalti, Putting Roblox and Twitch Data at Risk

Avatar photo
by Paige Williams
December 5, 2023
Image Credit: Unsplash
Notorious Ransomware Cartel Claims Breach of Tipalti, Putting Roblox and Twitch Data at Risk
Table of Contents
  1. ALPHV Ransomware Targets Tipalti
  2. Timeline of the Breach
  3. ALPHV's Targeted Strategy
  4. Threats to Roblox
  5. ALPHV/BlackCat Ransomware Operation

In a stunning development, it has been alleged that the notorious ALPHV/BlackCat ransomware cartel has obtained sensitive data from accounting software provider Tipalti, potentially putting the data of Roblox and Twitch at risk. The cybercriminals reportedly breached Tipalti’s systems, gaining access to a vast amount of company information.

ALPHV Ransomware Targets Tipalti

The dark web blog used by the ALPHV ransomware cartel has posted Tipalti as one of its latest victims. Tipalti, a Canada-based accounting software fintech, has seemingly caught the attention of these cybercriminals.

Timeline of the Breach

According to the claims made by the cybercriminals, they managed to infiltrate Tipalti’s network in early September. Shockingly, they remained undetected for several months, giving them ample time to exfiltrate over 265 GB of highly sensitive company data.

Tipalti is known for providing businesses with accounts payable, procurement, and global payments automation software. With access to such a large volume of sensitive data, the breach poses a significant threat to the privacy and security of not only Tipalti, but also its clients.

ALPHV’s Targeted Strategy

ALPHV’s dark web blog post suggests a deliberate targeting of not just Tipalti, but also recognizable brands like Roblox and Twitch. It appears that the cybercriminals aim to use these high-profile examples to threaten Tipalti and potentially expose data from other customers.

Threats to Roblox

Roblox, a popular game platform and game creation system, has also found itself separately targeted by the ALPHV ransomware cartel. The cybercriminals have explicitly stated their intention to “individually extort affected parties such as their creators.” This comes after an earlier breach in early July 2022, where internal documents of Roblox Corporation were leaked online.

ALPHV/BlackCat Ransomware Operation

ALPHV operates as a Ransomware-as-a-Service (RaaS) business, selling malware subscriptions to criminals. Their activities have been highly active over the past 12 months, victimizing over 320 organizations worldwide, according to Ransomlooker, Cybernews’ ransomware monitoring tool.

The alleged breach of Tipalti by the ALPHV/BlackCat ransomware cartel has sent shockwaves through the cybersecurity world. The potential exposure of data from Roblox, Twitch, and other unsuspecting victims raises concerns over privacy and security for individuals and businesses alike. It serves as a stark reminder of the constant threat posed by cybercriminals and the need for robust security measures to prevent such breaches in the future.

Digital TransformationInformation Security

Explore more

Is Desktop Customization the Cure for Linux Distro Hopping?
July 31, 2026

The rapid advancement of personal computing technology often creates a paradox where perfectly functional hardware is rendered obsolete by the arbitrary software constraints of major operating system vendors. Many users find themselves in a position where reliable machines, still possessing significant processing power and memory capacity, are suddenly excluded from receiving the latest security updates or feature sets. This forced

North Korean Hackers Use Fake macOS Updates to Steal Crypto
July 31, 2026

The sophisticated digital landscape of 2026 has witnessed a dramatic surge in highly targeted cyberattacks that specifically exploit the perceived inherent security of Apple’s macOS ecosystem. While many users once believed that the Unix-based architecture and rigorous app-vetting processes provided an impenetrable shield, state-sponsored actors from North Korea have proven otherwise by deploying deceptive software updates. These campaigns often leverage

Microsoft Copilot Flaw Enables Self-Propagating AI Worms
July 31, 2026

The rapid deployment of artificial intelligence within the corporate workspace has traditionally been viewed as a productivity catalyst, yet recent security discoveries have unveiled a sophisticated threat that fundamentally challenges the safety of automated workflows. Security researchers have identified a critical vulnerability within Microsoft Copilot for Word that facilitates a new class of “prompt injection” attacks, allowing malicious actors to

Is Your B2B PR Strategy Building Credibility or Just Noise?
July 31, 2026

Waiting until a major funding round or a massive product launch to initiate a public relations strategy often leaves B2B startups in a precarious position of anonymity during their most critical growth phases. Many founders operate under the misconception that public relations is a reactive mechanism, a lever to be pulled only when there is substantial news to share with

How Can B2B Brands Break Through Digital Marketing Fatigue?
July 31, 2026

The modern B2B procurement environment has transitioned into a hyper-saturated ecosystem where senior decision-makers are currently bombarded by a relentless stream of algorithmically generated outreach and automated marketing sequences. This pervasive digital marketing fatigue has rendered traditional tactics, such as high-volume email sequences and generic personalization tokens, largely ineffective for capturing the attention of high-value prospects who have grown cynical