cyber.hendryadrian.com
Cyber Attack & Data Breach · cyberdaily.au

Goodstone Group Confirms Cyber Incident After CMD Organization Claim

· Original article ↗

Summary

Goodstone Group confirmed it is responding to a cyber incident and found evidence that criminals removed data. CMD Organization claimed the theft, posted documents on its leak site and offered data for 9 BTC; the investigation is ongoing.

Key points

  • CMD Organization listed the Goodstone Group on its leak site and claimed to have stolen data.
  • The group posted documents as evidence, including employee passport scans, a confidentiality agreement and hotel bank reconciliation details.
  • Goodstone said it began responding on 18 April 2026, took steps to contain the incident, engaged external cybersecurity experts and notified Australian and Tasmanian authorities.
  • Goodstone said it found evidence that criminals removed some data; its investigation into the extent of affected data is ongoing.
  • The data was offered to the highest bidder for 9 BTC, approximately $1 million at the time of publication.
  • Beazley Security said CMD operations began in March and described the group’s tradecraft as suggesting a potentially well-networked operator with limited operational maturity.
  • CMD had claimed eight victims, with Goodstone its first Australian victim; Beazley noted the group’s public-bidding approach could give a winning bidder exclusive access to the data.

Article Details

Victim Organization
The Goodstone Group
Incident Type
Cybersecurity incident involving data removal from the network; CMD Organization described it as a ransomware attack, but the victim did not confirm that attribution.
Data Types Exposed
  • Employee passport scans
  • Confidentiality agreement
  • Bank reconciliation details
Operational Impact
The Goodstone Group said it took steps to contain the incident, engaged external cybersecurity experts, and notified the Australian Cyber Security Centre and the Tasmanian government. The investigation is ongoing; no further operational impact was reported.
Ransom Or Extortion
CMD Organization offered the allegedly stolen data for sale to the highest bidder, with an asking price of 9 BTC (approximately $1 million at the time of publication). The article does not report a direct ransom demand.
Claim Status
confirmed

Threat Actors

CmdorganizationThe group listed The Goodstone Group as a victim and offered data it claimed to have stolen for sale. The Goodstone Group confirmed a cybersecurity incident and evidence that cyber criminals removed some data, but did not attribute the intrusion to CMD Organization.

Industries

HospitalityA newly emerged ransomware group calling itself CMD Organization has listed the Tasmanian hospitality provider, the Goodstone Group, as a hacking victim on its dark web leak site.