ALPHV gang takes credit for ransomware attack on Constellation Software

The ALPHV ransomware gang (aka BlackCat), one of the significant ransomware threats targeting enterprises worldwide, has claimed responsibility for the recent ransomware attack on Canadian diversified software company Constellation Software, saying that they breached the company network and stole more than 1 TB worth of confidential data.

In a new entry to its data leak site, the ransomware gang threatened to leak the stolen data to the public if the company ignored the ransom demand and refused to negotiate. The gang also revealed that they have been on the company’s network for a long time and have had time to analyze their business. Reportedly, this ransomware operation was launched in November 2021.

At the same time, Constellation Software acknowledged that some systems were breached by threat actors, resulting in the theft of a small quantity of personal and business information belonging to the business partners of Constellation’s businesses.

According to the company, the breach was confined to a limited number of systems associated with the internal financial reporting and data storage of Constellation’s operating groups and businesses. The independent IT systems of Constellation’s operating groups and businesses remained unaffected. The company has managed to contain the attack and restored all impacted IT infrastructure systems. Constellation has also contacted business partners and individuals whose information was compromised during the breach.

Constellation Software is a company that operates through six main groups, namely Volaris, Harris, Jonas, Vela Software, Perseus Group, and Topicus. With over 25,000 employees across North America, Europe, South America, Australia, and Africa, the company generates over $4 billion in consolidated revenues. It offers services to 125,000 customers in over 100 countries and has acquired over 500 software companies since 1995.