Hackers Claim to Have Stolen Top Secret Documents From the U.S. Marshals Service

A hacking group claims to have stolen greater than 380 gigabytes of knowledge from the U.S. Marshals Service, together with confidential and top-secret paperwork and data about gangs, lively circumstances, and digital surveillance.

The ransomware group Hunters Worldwide took credit score for the breach and posted footage of the allegedly stolen data on its information leak web site, in line with the cybersecurity agency Hackmanac, which offered screenshots of the publish to Gizmodo. In whole, the group claims to have exfiltrated greater than 327,000 information from the federal legislation enforcement company accountable for monitoring down fugitives and working the witness safety program. The hackers set an August 30 deadline for a ransom to be paid.

A spokesperson for the U.S. Marshals Service instructed Gizmodo he couldn’t but affirm the breach’s authenticity however that the company was trying into the claims. Along with screenshots of what it says are gang information and lively case information, which seem to include headshots and different details about suspects, the hacking group additionally posted paperwork it claimed had been from “Operation Turnbuckle.” In 2022, upstate New York media shops reported on a marshals operation by the identical identify that led to the arrest of greater than a dozen drug trafficking suspects.

If confirmed, this is able to be the second main breach of the Marshals’ laptop methods in as a few years. The company suffered a debilitating ransomware assault in February of 2023 that crippled a few of its methods for months. It’s not instantly clear whether or not the info Hunters Worldwide claims to have stolen is linked to that breach, stated Sofia Scozzari, the CEO of Hackmanac. Cybersecurity researchers first recognized Hunters Worldwide as a risk group in October 2023, about eight months after the U.S. Marshals Service ransomware assault.

After Hunters Worldwide emerged on the scene, cybersecurity researchers speculated that it was a rebranding of the Hive ransomware group, which the FBI infiltrated and disrupted in a six-month investigation culminating in January 2023. Hunters Worldwide, nevertheless, claimed that it had merely bought Hive’s malware and improved upon it. Hackmanac has tracked 181 assaults linked to the group focusing on a variety of victims throughout non-public business and authorities.

The group presents ransomware-as-a-service, which means it sells and rents out its malware that infects a goal’s system and encrypts the information. The attacker then prices a price to return entry to the information. About 75 % of the Hunters Worldwide assaults Hackmanac has documented contain ransomware, Scozzari stated, however in its posts concerning the U.S. Marshals Service’s information the group didn’t declare to have encrypted the information along with stealing them, because it has completed beforehand.

“It’s clear that for Hunters, information is cash and the group’s predominant focus is maximizing income” moderately than any political motivation, Scozzari stated. “On this regard, the extra delicate the stolen information, the better the possibilities of receiving a big cost.”