Bell Canada subsidiary Bell Technical Solutions (BTS) has confirmed it was hit by a data breach that exposed personally identifiable information of its Ontario and Québec-based customers.
The infamous gang behind the Hive ransomware, which has previously hit the Costa Rican healthcare service and French Telco Altice, claimed responsibility for the security incident. BTS' systems were compromised and encrypted on August 20, the hacker group revealed in a data leak blog.
RELATED RESOURCE
Escape the ransomware maze
Conventional endpoint protection tools just aren’t the best defence anymore
Earlier this year, Microsoft’s Threat Intelligence Center revealed that it had discovered a new variant of the ransomware based on the Rust language, which also included a more efficient structure, better obfuscation and hardened encryption.
Acknowledging the hack, Bell stated: "We became aware that some operational company and employee information was accessed in a recent cybersecurity incident targeted at Bell Technical Solutions."
Perpetrators may have accessed the name, address, and phone number of residential and small business customers in Ontario and Québec who booked a technician visit, the company confirmed in its cybersecurity alert. However, despite the severity of the attack, Bell affirmed that customers’ banking data was not accessed or stolen.
BTS is currently investigating the incident alongside the Royal Canadian Mounted Police's cybercrime unit. The Office of the Privacy Commissioner has also been notified of the breach.
Lastly, to thwart plausible phishing attempts, the Bell subsidiary advised customers to monitor their accounts for any and all activities that appear suspicious.
"We will directly notify any individuals whose private information may have been accessed. Bell Technical Solutions operates independently from Bell on a separate IT system; other Bell customers or other Bell subsidiaries were not impacted," the company added.
-
SecurityHQ names Aaron Hambleton as product and services chiefNews Industry veteran will lead product and service innovation across the provider's cybersecurity portfolio
-
Cisco teams up with DSIT to drive digital skills adoptionNews Partnership supports the government's TechFirst program to provide one million secondary school students with access to digital learning experiences
-
Ransomware cartels are fragmenting into volatile splinter groups, warns Met Police cyber chiefNews Commoditized "cyber crime bazaars" and AI data mining are forcing law enforcement to rewrite its playbook
-
New ransomware threat group, The Gentlemen, has become one of the most active ransomware operators, accounting for 10% of all attacksNews NTT researchers warn that the RaaS group is leveraging SystemBC malware to establish covert tunnelling, evade detection, and support rapid lateral movement across enterprise environments
-
Instructure chose to a pay ransom following the Canvas cyber attack – research shows more than half of security leaders would follow suitAnalysis Opting to pay ransoms creates huge risks for enterprises – you’re relying on the word of criminals
-
Ransomware negotiator sentenced for role in major cyber crime groupNews Deniss Zolotarjovs was a key player in a group associated with Conti
-
Threat actors ditch ‘spray and pray’ attacks in shift to targeted exploitationNews A dip in ransomware volumes points to a more targeted approach focused on vulnerability exploitation
-
Security leaders overconfident about ransomware recovery
News Few manage to recover all their data, and many experience business disruption
-
German authorities want your help finding the hackers behind GandCrab and REvilNews Daniil Maksimovich Shchukin and Anatoly Sergeevitsch Kravchuk are believed to have made millions from ransomware as a service schemes
-
The rise of teen hackers ‘makes for a good headline’, but cyber crime activities peak later in life
News With family responsibilities and mortgages to pay, it's not teenagers dishing out malware or carrying out cyber extortion
