Breach

In a post on its leak site on Friday, RansomHub disclosed that it was able to exfiltrate files relating to contracts, financials, insurance, and confidential data while sharing a data sample that included Mexican government employees' names, job titles, workplaces, phone number extensions, email addresses, and ID reference numbers.

Investigation into the reported breach — which the New York Times reported had been conducted to target the campaigns of President-elect Donald Trump and Vice President Kamala Harris — is already being conducted by T-Mobile, which has so far not discovered evidence suggesting that its systems or data had been affected by the intrusion.

Information compromised in the breach has been obtained from a system that had been inactive for nearly two years, noted DemandScience in an email sent to an individual who inquired the firm after seeing his data in the leak.

Both Moucka, also known as waif, catist, judische, and cllyels, and Binns, also known as j_irdev1337 and irdev, have not only obtained 50 billion sensitive call and text records from a major telecommunications firm believed to be AT&T but also extorted nearly $2.5 million worth of cryptocurrency from at least three of their victims between November 2023 and early October.

Such a figure represents a significant increase from the nearly 97,000 and almost 27,000 individuals reported by Form I-9 Compliance to have been affected by the data breach, which was identified in April and publicly disclosed in May, in earlier filings with the Maine AGO.

Included in the data exfiltrated from Thompson Coburn's systems were individuals' names, birthdates, Social Security numbers, medical record and patient account numbers, treatment or prescription details, clinical information, medical provider details, and health insurance information, said the law firm in a disclosure to the Department of Health and Human Services.