SolidCAM Hit by Handala Ransomware, 50 GB of Data Exfiltrated and Published
Ransomware Attack on SolidCAM by Handala Group
Overview of SolidCAM
SolidCAM Ltd., founded in 1984 and headquartered in Or Yehuda, Israel, is a leading provider of computer-aided manufacturing (CAM) software solutions. The company is renowned for its innovative iMachining technology, which optimizes CNC machining toolpaths to reduce machining time and increase tool life. SolidCAM serves a global customer base, including over 1,000 large companies, and has subsidiaries in the UK, Germany, and other countries. The company employs over 300 people and generates an estimated annual revenue of $50-100 million.
Details of the Ransomware Attack
The ransomware group Handala has claimed responsibility for a cyberattack on SolidCAM, as announced on their dark web leak site. The group has exfiltrated and published 50 GB of data, including unreleased software versions such as SolidCAM2023SP3FullPack, SolidCAM2024, and iMachiningForNX2023_SP3. Handala's ransom note criticized SolidCAM for allegedly downplaying the breach and warned of further data releases if their demands were not met.
About Handala Ransomware Group
Handala Hack is a cybercriminal organization with a pro-Palestinian agenda, known for targeting Israeli institutions and their affiliates. The group employs sophisticated phishing campaigns and multi-stage malware loading processes to compromise targets. Handala has previously claimed responsibility for breaches involving Viber's source code and Israel's radar systems.
Potential Vulnerabilities
SolidCAM's integration with various CAD systems and its extensive global operations make it a lucrative target for ransomware groups. The company's reliance on digital tools and data for its CAM software solutions could have been exploited through phishing attacks or vulnerabilities in their network security. The attack underscores the importance of robust cybersecurity measures to protect sensitive data and intellectual property.
Implications of the Attack
The breach has significant implications for SolidCAM, potentially affecting its reputation and customer trust. The release of unreleased software versions could lead to financial losses and competitive disadvantages. The attack also highlights the ongoing threat posed by ransomware groups like Handala, emphasizing the need for continuous vigilance and advanced security protocols.
Sources
See Halcyon in action
Interested in getting a demo?
Fill out the form to meet with a Halcyon Anti-Ransomware Expert!