ZircoDATA faces Black Basta ransomware attack; sensitive data leaked

Australian data management company ZircoDATA has become the latest victim of the notorious Black Basta ransomware gang, as confirmed by reports on February 22. The cybercriminals claim to have accessed 395 gigabytes of data, including sensitive financial documents, personal user folders, and confidentiality agreements. The deadline for the ransom was initially set for March 1.

In response to the breach, ZircoDATA issued a statement acknowledging the incident and expressing their commitment to addressing it promptly. A spokesperson for the company stated, "We are aware that our company has been named on a dark web page in relation to a cyber incident. We are working with cybersecurity experts to investigate the situation with urgency and are committed to providing any relevant updates to our employees, customers, and stakeholders."

Despite ongoing investigations, ZircoDATA has not found evidence suggesting that the breach affected customers’ personal information. However, the leaked data posted by Black Basta includes a trove of sensitive documents, such as passport scans, immigration cards, and other identity documents. Among the compromised passports are those belonging to current or former ZircoDATA executives and partners at US private equity firm Housatonic Partners, a majority shareholder in ZircoDATA.

Additionally, the leaked data contains documents related to ZircoDATA’s subsidiary, Xine Communications, which offers translation services. The cyberattack underscores companies’ challenges in safeguarding sensitive information in an increasingly digitized landscape.

ZircoDATA, known for its information management, data storage, and document translation services, has assured its 9,000 customers and stakeholders of its commitment to protecting their information. The company has taken proactive measures by engaging law enforcement and notifying the Office of the Australian Information Commissioner.