Thales Group Falls Victim to Ransomware
Thales Group is a French multinational company that designs and builds electrical systems and provides services for the aerospace, defence, transportation and security markets.
On January 17, 2022 LockBit 2.0 Ransomware operator’s website stated that files belonging to thalesgroup.com encrypted and published.
LockBit, as well as other well-known cyber criminals behind ransomware, are attacking big companies. Their goal is to get access to inner enterprise information, encrypt it and ask for ransom. In exchange of money they guarantee victim their silence about security incident as well as decrypting previously encrypted files.
Kaduu Team has analysed leaked files and we believe they do belong to Thales Group. All the files we have seen are source codes of various Thales products, including:
- SpaceOPS product,
- Thalisman,
- Thales Trustnest Marketplace App
as well as others. Both Frontend and Backend files are leaked, some architecture files, ReadMe, docker files and databases configurations.
Your data might already be exposed. Most companies find out too late. Let ’s change that. Trusted by 100+ security teams.
🚀Ask for a demo NOW →Q: What is dark web monitoring?
A: Dark web monitoring is the process of tracking your organization’s data on hidden networks to detect leaked or stolen information such as passwords, credentials, or sensitive files shared by cybercriminals.
Q: How does dark web monitoring work?
A: Dark web monitoring works by scanning hidden sites and forums in real time to detect mentions of your data, credentials, or company information before cybercriminals can exploit them.
Q: Why use dark web monitoring?
A: Because it alerts you early when your data appears on the dark web, helping prevent breaches, fraud, and reputational damage before they escalate.
Q: Who needs dark web monitoring services?
A: MSSP and any organization that handles sensitive data, valuable assets, or customer information from small businesses to large enterprises benefits from dark web monitoring.
Q: What does it mean if your information is on the dark web?
A: It means your personal or company data has been exposed or stolen and could be used for fraud, identity theft, or unauthorized access immediate action is needed to protect yourself.