NightSpire Claims Breaches of GMP Group, Ghazi Brothers and Notre-Dame du Grandchamp

Summary
NightSpire claims to have breached GMP Group, Ghazi Brothers and Notre-Dame du Grandchamp. The group says it took over 2.3 TB from GMP Group and Notre-Dame; Ghazi Brothers’ data is listed as unavailable.
Key points
- NightSpire's posted list names GMP Group in Singapore, Ghazi Brothers in Pakistan and Notre-Dame du Grandchamp in France as alleged victims.
- The group claims more than 2.3 TB of data from GMP Group and Notre-Dame du Grandchamp.
- Ghazi Brothers' data is listed as unavailable.
- The allegedly taken data includes financial, salary, HR, employee, student, medical, academic, resume, contract and administrative records.
- The article provides no independent confirmation of the alleged breaches or data theft.
Article Details
- Victim
- GMP Group; Ghazi Brothers; Notre-Dame du Grandchamp (all listed by NightSpire as alleged victims; the article does not report victim confirmation)
- Encryption Status
- Not disclosed
- Exfiltration Status
- NightSpire claims data was taken from GMP Group and Notre-Dame du Grandchamp; data for Ghazi Brothers is listed as unavailable. Exfiltration is not independently confirmed.
- Exfiltrated Data
- The article says the allegedly compromised data included financial and salary documents, resumes/CVs, student medical and academic records, HR and employee personal data, and contracts and administrative files.
- Exfiltrated Size
- NightSpire claims more than 2.3 terabytes were taken from GMP Group and Notre-Dame du Grandchamp combined; no allocation is specified.
- Ransom Demand
- Not disclosed
- Leak Status
- NightSpire posted an alleged victim list. The article does not confirm that data was published; Ghazi Brothers' data is listed as unavailable.
Threat Actors
Countries
FranceThe NightSpire ransomware group claims to have breached multiple organizations and posted an alleged victim list including GMP Group (Singapore), Ghazi Brothers (Pakistan), and Notre-Dame du Grandchamp (France).PakistanThe NightSpire ransomware group claims to have breached multiple organizations and posted an alleged victim list including GMP Group (Singapore), Ghazi Brothers (Pakistan), and Notre-Dame du Grandchamp (France).SingaporeThe NightSpire ransomware group claims to have breached multiple organizations and posted an alleged victim list including GMP Group (Singapore), Ghazi Brothers (Pakistan), and Notre-Dame du Grandchamp (France).
