New York Racing Association confirms hack by Hive ransomware group
The hacker group previously targeted Costa Rican healthcare service, French Telco Altice, and Bell Canada subsidiary BTS
The Hive ransomware group has claimed an attack on the New York Racing Association (NYRA), the latest in a series of cyber attacks.
NYRA first disclosed the hack on June 30, after learning its IT operations, website availability, and member data were compromised.
RELATED RESOURCE
Escape the ransomware maze
Conventional endpoint protection tools just aren’t the best defence anymore
In its security breach notification sent to impacted individuals, the company confirmed that the threat actors gained access to personally identifiable information of a group of NYRA employees and their beneficiaries. However, customer data was unaffected, the company affirmed.
Social security numbers, driver's license identification numbers, health records, and health insurance information are among the exposed details.
As part of the attack, the Hive hacker group also posted a free link to download a ZIP file containing stolen data from the firm’s internal systems.
Acknowledging the scope of the attack, an NYRA spokesperson revealed: “On June 30, 2022, NYRA discovered suspicious network activity that had the markings of a potential cyber-attack.”
“In response, NYRA immediately suspended the connectivity of all affected systems, notified the relevant law enforcement and regulatory authorities, and mobilized cyber-security professionals to investigate the nature and scope of the attack.”
Sign up today and you will receive a free copy of our Future Focus 2026 report - the leading resource for IT decision-maker insight on priorities and investment areas in AI, security and more.
NYRA is also set to cover the cost of an identity protection service offered by Experian to help mitigate risks of identity theft for affected employees.
“Vermont residents can also consider placing a security freeze on their credit reports. A security freeze prevents most potential creditors from viewing your credit reports and therefore, further restricts the opening of unauthorized accounts,” the company added.
-
Broadcom eyes security, performance boosts with vDefend and Avi Load Balancer updatesNews Enhancements to VMware vDefend and VMware Avi Load Balancer use AI-powered automation to help secure private cloud environments
-
How business leaders are using the Dell Pro 7 and Dell Pro 5Sponsored Thanks to flexibility and a range of spec options, the Dell Pro 7 and Pro 5 laptops can suit a variety of business leaders across a mix of workplaces
-
Companies are still paying ransoms to cyber criminals despite official adviceNews A Proofpoint survey found evolving ransomware techniques and the use of AI is exacerbating the situation for victims
-
This one cyber crime group accounted for nearly a fifth of all ransomware attacks in JuneNews The Gentlemen, a ransomware a service operator, now accounts for 17% of published attacks
-
Working with the enemy: Ransomware negotiator-turned cyber criminal jailed after working with hackers to extort clientsNews Angelo Martino was supposed to be negotiating on behalf of victims, but was secretly working for ransomware operators
-
Hackers are posing as Interpol to target small businesses – here's what you need to knowNews Small businesses are warned to think twice before clicking on links
-
‘Every hour ransomware goes undetected drastically increases its potential blast radius’: Hackers are breaching networks and laying low for longer – and nearly half of firms don’t realize until data is stolenNews An ExtraHop survey found more intrusions are going undetected, leading to longer dwell times
-
Ransomware cartels are fragmenting into volatile splinter groups, warns Met Police cyber chiefNews Commoditized "cyber crime bazaars" and AI data mining are forcing law enforcement to rewrite its playbook
-
New ransomware threat group, The Gentlemen, has become one of the most active ransomware operators, accounting for 10% of all attacksNews NTT researchers warn that the RaaS group is leveraging SystemBC malware to establish covert tunnelling, evade detection, and support rapid lateral movement across enterprise environments
-
Instructure chose to a pay ransom following the Canvas cyber attack – research shows more than half of security leaders would follow suitAnalysis Opting to pay ransoms creates huge risks for enterprises – you’re relying on the word of criminals