Crown Resorts confirms ransom demand from Clop ransomware gang

Australia’s largest gambling and entertainment company Crown Resorts, which has an annual revenue of $8 billion and operates complexes in Perth, Melbourne, Sydney, Macau, and London, has confirmed that it suffered a major data breach after its GoAnywhere secure file-sharing server was compromised using a zero-day vulnerability.

According to sources, the data breach was conducted by the Clop ransomware gang, which claimed to have stolen sensitive data from 130 organizations over ten days utilizing a GoAnywhere zero-day vulnerability. Reportedly, Clop demanded a random and threatened to release the sensitive data it stole from their networks.

A spokesperson of the formerly listed company said in a statement that the ransomware group claimed they had illegally obtained a limited number of Crown files. However, no customer data was compromised, and business operations were unaffected, according to the spokesperson, who added that the company is investigating the ransomware group’s claims.

The gambling and entertainment company stated that it would continue to work with law enforcement to investigate the security incident and will provide updates if new evidence is discovered.

Meanwhile, Fortra, the GoAnywhere software vendor, is facing a class action lawsuit in the US after being accused of failing to implement sufficient cybersecurity measures to protect the private data stored in its network.