Rostova Organization and Vect Claim Usha International Breach and $10,000 Extortion Demand
Summary
Rostova Organization and Vect claim they breached Usha International, alleging it refused a $10,000 extortion demand. The actors say data offered for sale includes employee identity, financial, employment and Active Directory details; the claims are unverified.
Key points
- Rostova Organization and the Vect ransomware group claim responsibility for a breach of Usha International Limited; the article provides no independent confirmation.
- The actors allege Usha International refused a $10,000 extortion demand and say corporate and employee databases are being offered for sale on a dark web forum.
- The claimed data includes employee names, contact details, demographic information, employment records, and government identifiers such as Aadhar and PAN numbers.
- The actors also claim the data includes bank account details and Active Directory information, including SamAccountName, NT hashes, and SIDs.
Article Details
- Victim Organization
- Usha International Limited
- Victim Domain
- Unknown
- Incident Type
- Alleged data breach and extortion
- Data Types Exposed
- Employee personal and demographic information
- Contact information
- Employment records
- Government identification numbers (Aadhar, PAN, ESI, UAN)
- Financial information, including bank account numbers
- Active Directory account details, including SamAccountName, NT hashes, and SIDs
- Affected Records
- Not disclosed
- Affected Data Size
- Not disclosed
- Operational Impact
- None reported
- Ransom Or Extortion
- Rostova Organization and Vect allegedly demanded $10,000 and claim the data was listed for sale for that amount after Usha International Limited allegedly refused to negotiate.
- Claim Status
- claimed
Threat Actors
Rostova OrganizationClaims to have breached Usha International Limited and, in collaboration with Vect, listed corporate and employee databases for sale; the breach and extortion activity are not independently confirmed in the article.VectIdentified as a ransomware group collaborating with Rostova Organization, which claims to have breached Usha International Limited and listed data for sale; the activity is not independently confirmed in the article.