Rostance Edwards Hit by Meow Ransomware, 7GB of Sensitive Data Compromised

Incident Date: Aug 16, 2024

Attack Overview
VICTIM
Rostance Edwards
INDUSTRY
Business Services
LOCATION
United Kingdom
ATTACKER
Meow
FIRST REPORTED
August 16, 2024

Rostance Edwards Falls Victim to Meow Ransomware Attack

Rostance Edwards Limited, a well-established accountancy firm based in Cannock, Staffordshire, has recently been targeted by the notorious Meow Ransomware group. The attack has compromised 7 GB of sensitive data, including employee information, client details, document scans, personal data, and financial records.

About Rostance Edwards

Founded in 1998, Rostance Edwards is a prominent accountancy firm offering a comprehensive range of services such as auditing, accountancy, bookkeeping, payroll, taxation, and business advisory services. The firm is known for its personalized and proactive approach, catering to a diverse clientele that includes small businesses and larger corporations across various sectors like healthcare, construction, and education.

Rostance Edwards stands out in the industry for its commitment to enhancing the value of its clients' businesses through tailored financial management and strategic advice. The firm also emphasizes continuous professional development to ensure its team is equipped to handle modern accounting challenges.

Details of the Attack

The Meow Ransomware group claims to have infiltrated Rostance Edwards' systems, gaining access to a significant amount of sensitive data. The attackers have listed the firm on their dark web leak site, threatening to release the compromised information if the ransom is not paid. The breach has raised concerns about the security measures in place at Rostance Edwards, particularly given the sensitive nature of the data they handle.

About Meow Ransomware

Meow Ransomware emerged in late 2022 and has been associated with the Conti v2 ransomware variant. The group is known for targeting industries with sensitive data, such as healthcare and medical research. They employ various infection methods, including phishing emails, exploit kits, Remote Desktop Protocol (RDP) vulnerabilities, and malvertising. Once a system is compromised, the ransomware encrypts files using a combination of the ChaCha20 and RSA-4096 algorithms.

Meow Ransomware distinguishes itself by maintaining a data leak site where they list victims who have not paid the ransom. The group has been identified as the "Anti-Russian Extortion Group," likely due to their targeting of entities in response to the Russia-Ukraine war.

Potential Vulnerabilities

Rostance Edwards, like many firms in the business services sector, handles a vast amount of sensitive data, making it an attractive target for ransomware groups. The firm's reliance on digital systems for managing client information and financial records could have exposed vulnerabilities that the Meow Ransomware group exploited. The attack underscores the importance of effective cybersecurity measures to protect against such threats.

Sources

See Halcyon in action

Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!

1
2
3
Let's get started
1
1
2
3
1
1
2
2
3
Back
Next
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.