Victor Fauconnier Compromised by Ra Group Ransomware

Details of the Attack

Victor Fauconnier has been compromised by the Ra Group ransomware group. The attack allegedly led to the exfiltration of 270 GB of data, including financial documents, sales materials, production documents, and legal documents. Samples of the leaked data have been published, and a ransom deadline of 15th April was given.

About Victor Fauconnier

Founded in 1829, Victor Fauconnier specializes in the blending and bottling of a wide range of spirits: whiskies, vodkas, rums, gins, wine-based aperitifs, liqueurs, etc. Victor Fauconnier bottles its own branded products and works with the retail sector bottling private labels spirits.

About RA World Ransomware Group

The RA World (previously the RA Group) ransomware gang has successfully breached entities around the globe since it first reared its ugly head in April 2023. This ransomware group operates by first exfiltrating victims' data, followed by deploying its encryption malware. The group behind it maintains both TOR and non-TOR websites for leaking stolen data. Moreover, the ransomware is programmed to eliminate Volume Shadow Copies and system backups, stopping any attempts at system recovery in their tracks.

Specific details regarding the infection pathway utilized by the RA World are not available. However, it is unlikely to deviate significantly from methods employed by other ransomware collectives.

Global Impact

Instances of RA World ransomware have been identified through submissions to a publicly accessible file scanning service originating from various countries, including the Netherlands, France, the United Kingdom, the Czech Republic, Poland, Colombia, and Japan. At present, the data leak sites associated with the ransomware name 23 victims distributed across several countries, including Germany, the UK, the US, Italy, Poland, India, Taiwan, Mexico, France, Thailand, and Korea.