Bell Canada subsidiary Bell Technical Solutions (BTS) has confirmed it was hit by a data breach that exposed personally identifiable information of its Ontario and Québec-based customers.
The infamous gang behind the Hive ransomware, which has previously hit the Costa Rican healthcare service and French Telco Altice, claimed responsibility for the security incident. BTS' systems were compromised and encrypted on August 20, the hacker group revealed in a data leak blog.
RELATED RESOURCE
Escape the ransomware maze
Conventional endpoint protection tools just aren’t the best defence anymore
Earlier this year, Microsoft’s Threat Intelligence Center revealed that it had discovered a new variant of the ransomware based on the Rust language, which also included a more efficient structure, better obfuscation and hardened encryption.
Acknowledging the hack, Bell stated: "We became aware that some operational company and employee information was accessed in a recent cybersecurity incident targeted at Bell Technical Solutions."
Perpetrators may have accessed the name, address, and phone number of residential and small business customers in Ontario and Québec who booked a technician visit, the company confirmed in its cybersecurity alert. However, despite the severity of the attack, Bell affirmed that customers’ banking data was not accessed or stolen.
BTS is currently investigating the incident alongside the Royal Canadian Mounted Police's cybercrime unit. The Office of the Privacy Commissioner has also been notified of the breach.
Lastly, to thwart plausible phishing attempts, the Bell subsidiary advised customers to monitor their accounts for any and all activities that appear suspicious.
"We will directly notify any individuals whose private information may have been accessed. Bell Technical Solutions operates independently from Bell on a separate IT system; other Bell customers or other Bell subsidiaries were not impacted," the company added.
-
The rise of teen hackers ‘makes for a good headline’, but cyber crime activities peak later in lifeNews With family responsibilities and mortgages to pay, it's not teenagers dishing out malware or carrying out cyber extortion
-
Ransomware gangs are using employee monitoring software as a springboard for cyber attacksNews Two attempted attacks aimed to exploit Net Monitor for Employees Professional and SimpleHelp
-
Ransomware gangs are sharing virtual machines to wage cyber attacks on the cheap – but it could be their undoingNews Thousands of attacker servers all had the same autogenerated Windows hostnames, according to Sophos
-
Google issues warning over ShinyHunters-branded vishing campaignsNews Related groups are stealing data through voice phishing and fake credential harvesting websites
-
The FBI has seized the RAMP hacking forum, but will the takedown stick? History tells us otherwiseNews Billing itself as the “only place ransomware allowed", RAMP catered mainly for Russian-speaking cyber criminals
-
Everything we know so far about the Nike data breachNews Hackers behind the WorldLeaks ransomware group claim to have accessed sensitive corporate data
-
There’s a dangerous new ransomware variant on the block – and cyber experts warn it’s flying under the radarNews The new DeadLock ransomware family is taking off in the wild, researchers warn
-
Hacker offering US engineering firm data online after alleged breachNews Data relating to Tampa Electric Company, Duke Energy Florida, and American Electric Power was allegedly stolen
