Snow Brand Australia Targeted by SafePay Ransomware Group
Ransomware Attack on Snow Brand Australia by SafePay Group
Snow Brand Australia, a prominent player in the Australian dairy industry, recently fell victim to a ransomware attack orchestrated by the emerging SafePay group. This incident highlights the vulnerabilities faced by companies in the manufacturing sector, particularly those with significant digital footprints and international operations.
Company Overview
Snow Brand Australia, a subsidiary of the Japanese Megmilk Snow Brand Co. Ltd., specializes in the production and distribution of high-quality dairy products, including award-winning cheeses and infant formula. Established in New South Wales in 1977, the company has grown to become a key player in the Australian dairy market. With a workforce of 11 to 50 employees, Snow Brand Australia is known for its commitment to quality and innovation, producing brands like Unicorn Cheese and distributing the patented MBP® protein.
Attack Details
The SafePay ransomware group claimed responsibility for the attack, listing Snow Brand Australia on its dark web leak site. The breach resulted in the exposure of a 24-gigabyte dataset containing financial documents, business records with retail partners, and sensitive employee information. The company responded swiftly by securing its systems, launching an investigation, and notifying relevant authorities. Despite the breach, Snow Brand Australia continues to focus on its strategic growth plans.
SafePay Ransomware Group
SafePay is a relatively new player in the ransomware landscape, known for employing ransomware-as-a-service tactics and utilizing LockBit source code. The group distinguishes itself through a double-extortion strategy, encrypting files and threatening to release stolen data if ransom demands are not met. SafePay's operations suggest a potential Eastern European origin, as they avoid Cyrillic-language environments and often gain access to victim networks through VPN gateways.
Vulnerabilities and Implications
Snow Brand Australia's reliance on digital systems for its operations and partnerships made it a target for cybercriminals like SafePay. The attack underscores the importance of effective cybersecurity measures, especially for companies in the manufacturing sector with valuable intellectual property and sensitive data. As SafePay continues to expand its list of victims, organizations must remain vigilant and proactive in safeguarding their digital assets.
Sources
See Halcyon in action
Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!