The Anubis ransomware operation, which launched in December 2024 and operates as a ransomware-as-a-service (RaaS), claims to have exfiltrated 170,000 files from AkzoNobel.
The breach occurred on February 24 when threat actor FulcrumSec exploited the React2Shell vulnerability in an unpatched React frontend application to gain access to the company's AWS infrastructure.
SecurityWeek reports that New York-based Madison Square Garden has confirmed the compromise of its data following the Clop ransomware operation's sweeping attacks exploiting Oracle E-Business Suite vulnerabilities.
The breach, described as a "systematic and sophisticated attack," led to unauthorized access to basic account details including contact information, usernames, dates of birth, and names.
