Centrillion Technologies Hit by Cicada 3301 Ransomware Attack

Incident Date: Oct 25, 2024

Attack Overview
VICTIM
Centrillion Technologies
INDUSTRY
Healthcare Services
LOCATION
USA
ATTACKER
Cicada 3301
FIRST REPORTED
October 25, 2024

Centrillion Technologies Targeted by Cicada 3301 Ransomware Attack

Centrillion Technologies, a prominent biotechnology firm based in Palo Alto, California, has recently fallen victim to a ransomware attack orchestrated by the notorious group Cicada 3301. This incident has raised significant concerns within the cybersecurity community, given the sensitive nature of the data involved and the company's pivotal role in genomic research.

About Centrillion Technologies

Founded in 2009, Centrillion Technologies is a leader in the biotechnology sector, specializing in advanced DNA analysis technologies. The company is renowned for its innovative DNA chip technology, which facilitates rapid multiplex pathogen detection, whole genome viral sequencing, and human genotyping. With a workforce of 11 to 50 employees, Centrillion has made significant strides in personalized medicine and life sciences research, backed by approximately $86.79 million in funding. Its flagship product, the VirusHunter™ MVP assay, is a testament to its commitment to precision and innovation in genomic analysis.

Details of the Ransomware Attack

The ransomware group Cicada 3301 claims to have infiltrated Centrillion Technologies' systems, exfiltrating a substantial 2,300 GB of sensitive data. The attackers have released sample screenshots of the compromised data on their dark web portal, indicating the potential exposure of proprietary research and confidential information. This breach underscores the vulnerabilities that even leading biotech firms face in the evolving landscape of cyber threats.

Understanding Cicada 3301

Cicada 3301, a relatively new player in the ransomware scene, distinguishes itself by focusing on data exfiltration and long-term monetization rather than immediate ransom payments. Operating as a Ransomware-as-a-Service (RaaS) group, they employ sophisticated techniques such as phishing, brute-forcing VPN credentials, and exploiting vulnerabilities in network appliances. Their use of the Brutus botnet for initial access and the ChaCha20 encryption algorithm for data encryption highlights their technical prowess and strategic approach to cyber extortion.

Potential Vulnerabilities and Impact

Centrillion Technologies, like many small to medium-sized enterprises, may have been targeted due to potential vulnerabilities in their cybersecurity infrastructure, particularly in VPN environments. The attack not only threatens the confidentiality of their cutting-edge research but also poses significant operational and reputational risks. As the biotechnology sector continues to advance, the need for effective cybersecurity measures becomes increasingly critical to safeguard sensitive data and maintain industry trust.

Sources

See Halcyon in action

Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!

1
2
3
Let's get started
1
1
2
3
1
1
2
2
3
Back
Next
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.