Direwolf Claims NorthStar ERP Systems Were Disrupted and Business Data Encrypted

Summary
Ransomware[.]live lists NorthStar, a Canada-based ERP organization, as a Direwolf victim. The post attributes claims of operational disruption and encrypted business data to the ransomware group; the information is unconfirmed.
Key points
- Ransomware[.]live lists NorthStar, a Canada-based enterprise resource planning organization, as the victim.
- The record attributes the claim to the Direwolf ransomware operation and cites a public article on the actor’s site.
- The post claims NorthStar’s ERP environment was disrupted and business data encrypted; the article says these claims are unconfirmed.
Article Details
- Victim
- NorthStar
- Victim Domain
- Not disclosed
- Encryption Status
- Claimed; unconfirmed. The article says business data was encrypted but states that the information is based on public claims it cannot verify.
- Encrypted Size
- Unknown
- Exfiltration Status
- Unknown
- Exfiltrated Data
- Unknown
- Exfiltrated Size
- Unknown
- Ransom Demand
- Unknown
- Leak Status
- Unknown
