Cybernews reports that U.S. regional gas station and convenience store chain Super Quik had multiple internal files and surveillance video footage exposed by the Play ransomware operation, which claimed to have exfiltrated a 5.5 GB dataset from its systems.
Included in the files leaked by Play were Super Quik's financial reports detailing daily sales and balance sheets, invoices, several product photos, payroll change notice, renovation plans, employee training documents, internal workplace policies, internal document templates, and short security camera clips showing workers' and customers' faces.
Super Quik has yet to confirm Play's assertions. However, such exposure could increase the risk of social engineering and identity theft attacks against its employees and clients, according to Cybernews researchers.
Suspected Russia-linked Play ransomware gang has already compromised 964 organizations since its emergence two years ago, with U.S. cybersecurity research services provider Grammatech and military and commercial aircraft industrial parts supplier Jamco Aerospace among its most recent victims.
