Ransomware Attack on STIIIZY by Everest Group

STIIIZY, a leading cannabis lifestyle brand based in Los Angeles, California, has fallen victim to a ransomware attack orchestrated by the Everest ransomware group. This cybercriminal organization, known for its double extortion tactics and targeting of critical sectors like healthcare, has set its sights on STIIIZY, threatening to leak sensitive data if ransom demands are not met.

Company Profile

STIIIZY, established in 2017, has rapidly grown to become a prominent player in the cannabis industry, offering a diverse range of high-quality products, including vapes, concentrates, and flower. The company's innovative pod system has set new standards for convenience and quality in the market, attracting a loyal customer base.

Attack Overview

The Everest ransomware group has claimed responsibility for infiltrating STIIIZY's systems and compromising the personal data and IDs of 422,075 clients. The attackers have shared sample screenshots on their dark web portal, indicating the severity of the breach. The ransom deadline is looming, with the threat of data leakage hanging over the company.

Ransomware Group Details

The Everest ransomware group, operating since December 2020, has gained notoriety for its sophisticated tactics and focus on initial access brokering. By targeting sectors like healthcare and aerospace, the group has demonstrated a willingness to exploit vulnerabilities in critical infrastructure.

Penetration and Vulnerabilities

STIIIZY's prominence in the cannabis industry, coupled with its large customer base and extensive operations, likely made it an attractive target for threat actors like the Everest group. The company's valuable data and sensitive information could have been compromised through various means, such as phishing attacks, unsecured network access points, or outdated security protocols.

Sources:

• Halcyon AI - Everest Ransomware Hits ArcTrade
• HIPAA Journal - Everest Ransomware Warning in Healthcare
• BankInfoSecurity - US Authorities Warn of Everest Gang Threats
• Becker's Hospital Review - Everest Ransomware Group Shifts Focus to Healthcare
• HCI Innovation Group - HHS: Ransomware Group Everest Targeting Healthcare Sector