coinbasecartel Claims Ransomware Attack on KEB

Summary

A ransomware claim attributed to coinbasecartel alleges that KEB was compromised, with systems encrypted and possible data exfiltration. The post says operations in Germany were affected; the claims are unconfirmed.

Key points

The post attributes a ransomware claim against KEB (Korea Exchange Bank) to coinbasecartel.
The claim alleges encrypted systems and a ransom demand for data decryption.
Possible data exfiltration and effects on operations in Germany are alleged, not confirmed.
The post links to an actor claim page and says the information could not be independently confirmed.

Article Details

Victim: KEB (Korea Exchange Bank)
Claim Date: 2026-04-08
Encryption Status: The ransomware claim describes encrypted systems; this is unverified by the source and not confirmed by the victim.
Exfiltration Status: Potential data exfiltration is described in the claim but is unverified.
Exfiltrated Data: The claim does not specify what data may have been exfiltrated.
Ransom Demand: The claim says ransom was demanded for data decryption; no amount is reported.
Leak Status: A claim was listed on the ransomware group's source; the source article says it cannot confirm the claim's accuracy.

Threat Actors

Coinbase CartelThe article attributes the unverified ransomware claim concerning KEB to coinbasecartel.

Countries

GermanyA ransomware claim alleges that the threat actor coinbasecartel compromised KEB (Korea Exchange Bank) and affected operations in Germany, demanding ransom for data decryption.South KoreaHeadquartered in Seoul, South Korea.

Industries

Financial ServicesOffers a wide range of banking and financial services, including retail banking, corporate banking, foreign exchange, and trade finance.