#Datacarry

Claudio

@sonoclaudio.ransomnews.online

3 months ago

🆕 🇮🇹 via, @ransomnews.online | ransomnews.online
🏴‍☠️ Gruppo: #datacarry | Rivendicazione attacco informatico
🗒️ 3° attacco catalogato nel mese di Dicembre
⚠️ 154° attacco #Ransomware catalogato nel 2025

ransomNews

@ransomnews.online

3 months ago

🚨 nuova rivendicazione #ransomware Italia 🚨

🏴‍☠️ gruppo #Datacarry
🧬 Camomilla Italia | Napoli
🎯 settore: abbigliamento
🔗 camomillaitalia.it
🗓️ 06 dicembre 2025

📄 sample: sì
▪️ dati esfiltrati dichiarati: -
▪️ dati esfiltrati pubblicati: -
⏲️ scadenza: -

#ransomNews #security #infosec

Ahmandonk

@ahmandonk.bsky.social

4 months ago

📰 Kebocoran Data di Pemasok Perangkat Lunak Swedia Berdampak pada 1,5 Juta Orang

👉 Baca artikel lengkap di sini: ahmandonk.com/2025/11/05/miljodata-dat...

#cybersecurity #darkweb #data-breach #datacarry #gdpr #miljodata #privacy #sweden

CySecurity News

@cysecuritynews.bsky.social

5 months ago

Volvo NA Employee Data Exposed in Miljödata Ransomware Attack  Volvo North America recently disclosed that sensitive employee information was compromised following a ransomware attack targeting its HR software provider, Miljödata. The breach, attributed to the DataCarry ransomware group, exposed names and social security numbers of Volvo staff after cybercriminals infiltrated Miljödata’s cloud-hosted Adato system in August 2025. The confirmation of Volvo’s affected data came on September 2, several days after Miljödata detected the intrusion on August 23. Miljödata responded by initiating an investigation, collaborating with cybersecurity experts, and enhancing security measures to prevent future incidents, while Volvo Group continues to closely monitor the evolving situation. DataCarry claimed responsibility for the attack, posting Miljödata’s stolen files on a dark web site for download. Adato, a specialized HR platform used primarily to manage employee sick leave and rehabilitation, became the focal point of the attack. The fallout extended beyond Volvo, impacting other organizations and municipalities across Sweden, since around 80 percent of Sweden’s 290 municipalities use Miljödata’s software. Some victims suffered broader data exposure, including phone numbers, addresses, gender, and employment details, depending on how they used Adato. According to the Swedish Herald’s prosecutor Sandra Helgadottir, about 1.5 million individuals were impacted, reflecting the large footprint of Miljödata’s clientele. Swedish airline SAS, which employed Adato until June 2021, confirmed that current and former employees who joined before June 21, 2021, might have had personal and sick leave information exposed. The City of Stockholm was also affected, despite not operating live systems with Miljödata, with data related to workplace incident reporting and employee accounts among the compromised information. The attack disrupted services in approximately 200 municipalities, and additional victims included several prominent universities such as Chalmers, Karlstad, Lunds, Linköping, Umeå, and the Swedish University of Agricultural Sciences, all of which reported being affected due to Adato usage. Uppsala University avoided the breach by running Adato on-premises. This incident underscores the substantial downstream risks created by third-party vendor breaches, as malicious actors increasingly target interconnected systems holding large volumes of personal and employment data. Organizations affected are responding with investigations, security upgrades, and disclosures to regulatory authorities, highlighting the critical need to safeguard supply chain platforms and scrutinize cloud-hosted environments for vulnerabilities.

Volvo NA Employee Data Exposed in Miljödata Ransomware Attack #DataBreach #DataCarry #Miljödata

CCITIC

@ccitic.bsky.social

5 months ago

Update to our report on Datacarry ransomware
#CCITIC
#Ransomware #Hacker #Cybersecurity #Threat #Datacarry #Blacksuit #Akira

Claudio

@sonoclaudio.ransomnews.online

5 months ago

2/2
Da ricordare: nel mese di Maggio 2025 #Datacarry ha rivendicato un attacco informatico a Alliance Healthcare Italia S.P.A. | alliance-healthcare.it | uno dei maggiori grossisti e distributori farmaceutici in Europa.

ransomNews

@ransomnews.online

5 months ago

Meet #DataCarry - a ransomware group born in 2024, publicly emerging in 2025.

Focused on double extortion and EMEA victims, it quickly carved a spot in the ransomware ecosystem.

@sonoclaudio.ransomnews.online @signorina37.ransomnews.online @garantepiracy.it

#ransomNews #Ransomware #ThreatIntel

ransomNews

@ransomnews.online

7 months ago

🚨 BREAKING: Peggy Sage under Datacarry’s shadow

French beauty giant Peggy Sage has been hit by the emerging #DATACARRY ransomware.
Attackers exfiltrated 11.3 GB of sensitive data and released it in a ZIP archive.

#ransomNews #ransomware #beauty

CCITIC

@ccitic.bsky.social

8 months ago

📢 Just out:
our new #CTI report on the
#Datacarry #Ransomware group

✏Summary
📆 11 orgs hit (Jun '24 – Jun '25)
🛠️ CVE-2023-48788 (Fortinet EMS)
🕸️ Chisel over WebSocket, solid infra & tooling

💻Full technical breakdown
ccitic.org/assets/repor...

📄by Kévin Wiart, Hyuna Lee and Rakesh Krishnan

Comparitech.com

@comparitech.bsky.social

9 months ago

🚨 NEW #ransomware gang #DataCarry recently targeted La Maison Liégeoise 🇧🇪

The Belgian public social housing organization suffered an attack on May 19 and confirmed a #databreach yesterday. Most systems are now restored.

bit.ly/3T0yGne

ransomNews

@ransomnews.online

9 months ago

🥷🏻 chi sono i cattivi

#DATACARRY: emerso recentemente, con attività documentate a partire da maggio 2025. Ha preso di mira aziende in diversi settori, tra cui servizi finanziari e assicurativi, come evidenziato dagli attacchi a Balcia Insurance e FrontierCo.

☣️

ransomNews

@ransomnews.online

9 months ago

Tra le aziende colpite figurano Farmacisti Più Rinaldi, Alliance Healthcare Italia e D.M. Barone, tutte coinvolte in attacchi attribuiti ai gruppi criminali #DATACARRY e #DEVMAN.

Gli attacchi a queste supply chain hanno conseguenze gravi su diversi aspetti: i sistemi informatici

☣️

Claudio

@sonoclaudio.ransomnews.online

9 months ago

🆕 🇮🇹 via, @ransomnews.online
🏴‍☠️ Gruppo: #datacarry | Rivendicazione attacco informatico
🗒️ 10° attacco catalogato nel mese di Maggio
⚠️ 72° attacco #Ransomware catalogato nel 2025

ransomNews

@ransomnews.online

9 months ago

🚨 nuova rivendicazione #ransomware Italia 🚨

🏴‍☠️ gruppo #DATACARRY
🧬 Alliance Healthcare Italia SPA | Lavagna (GE)
🎯 settore: distribuzione
🔗 alliance-healthcare.com
🗓️ 29 maggio 2025

📄 sample: sì
▪️ dati esfiltrati dichiarati: -
▪️ dati esfiltrati pubblicati: -
⏲️ scadenza: -

#ransomNews #security