McAuslan Brewing Faces Ransomware Threat from SafePay
Ransomware Attack on McAuslan Brewing by SafePay
On November 21, McAuslan Brewing, a prominent Canadian brewery based in Montreal, became the latest victim of a ransomware attack by the cybercriminal group SafePay. Known for its St-Ambroise craft beer line, McAuslan has been a significant player in the Quebec brewing scene since its establishment in 1989. The attack resulted in the exfiltration of approximately 50GB of sensitive data, potentially impacting the company's operations and customer data.
About McAuslan Brewing
McAuslan Brewing, officially known as La Brasserie McAuslan Inc., produces around 70,000 hectoliters of beer annually. The brewery is renowned for its craft beers, particularly the St-Ambroise brand, and has carved out a niche in the competitive craft beer market. McAuslan's commitment to quality and innovation, along with its strategic partnerships, has solidified its reputation as a leader in Quebec's craft beer scene. The brewery's engagement with the community through tours and events further distinguishes it in the industry.
Details of the Attack
The ransomware attack orchestrated by SafePay involved the theft of approximately 50GB of data. While the specifics of the compromised information remain undisclosed, the scale of the leak suggests a significant impact on McAuslan's operations. SafePay has not publicly disclosed its demands or intentions following the attack, and McAuslan has yet to release an official statement, leaving stakeholders in anticipation of further developments.
SafePay Ransomware Group
SafePay is a relatively new ransomware group known for employing ransomware-as-a-service tactics and utilizing LockBit source code. The group distinguishes itself through a double-extortion strategy, encrypting files and threatening to release stolen data if ransom demands are not met.
Potential Vulnerabilities
McAuslan Brewing's online presence and community engagement may have exposed it to cyber threats. The brewery's reliance on digital systems for operations and customer interactions could have provided entry points for SafePay. The attack underscores the importance of effective cybersecurity measures, particularly for companies with significant digital footprints and community engagement activities.
Sources
See Halcyon in action
Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!