RansomHub Ransomware Disrupts Inglenorth Contracting Operations
RansomHub Ransomware Attack on Inglenorth Contracting
Inglenorth Contracting, a UK-based specialist in demolition and related services, has recently fallen victim to a ransomware attack orchestrated by the cybercriminal group RansomHub. This attack has potentially compromised their operational capabilities and client data, posing significant risks to their business continuity and reputation.
About Inglenorth Contracting
Established in 1999, Inglenorth Contracting Limited operates from its headquarters in Wigan, Lancashire. The company offers a comprehensive range of services, including stand-alone demolition, site clearance, recycling, and remediation. They are particularly noted for their expertise in nuclear decommissioning and asbestos removal. Inglenorth is accredited with several quality management standards, including ISO 9001:2015, ISO 14001:2015, and ISO 45001:2018, and is a member of the National Federation of Demolition Contractors (NFDC).
Attack Overview
The ransomware attack on Inglenorth Contracting was claimed by RansomHub via their dark web leak site. The attack has disrupted the company's operations, which include critical services such as nuclear site decommissioning and asbestos removal. The breach has raised concerns about the safety and compliance of their ongoing projects, given the sensitive nature of their work.
About RansomHub
RansomHub, a Ransomware-as-a-Service (RaaS) group, emerged in February 2024. Known for its aggressive affiliate model and double extortion tactics, RansomHub encrypts victims' data and exfiltrates sensitive information to leverage ransom demands. The group has quickly gained notoriety for its speed and efficiency, targeting high-value sectors such as healthcare, financial services, and government.
Penetration and Impact
RansomHub likely penetrated Inglenorth's systems through phishing campaigns, vulnerability exploitation, or password spraying. The group's ransomware is optimized to encrypt large datasets quickly, targeting cross-platform systems including Windows, Linux, and ESXi. The attack has not only disrupted Inglenorth's operations but also exposed sensitive client data, which could have severe implications for their business relationships and compliance with industry regulations.
Sources
See Halcyon in action
Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!