Security News > 2021 > May > Doncaster insurance firm One Call hit by not-dead-at-all Darkside ransomware gang

A Doncaster insurance company has been hit by ransomware from the Darkside crew - whose "Press release" declaring it was shutting down its operations last week was taken at face value by some pundits.

The Doncaster Free Press reports that One Call Insurance, based in the northern English city, had been compromised by Darkside a week ago.

The ICO is aware of the attack, as are insurance industry regulators, One Call told us, adding: "We apologise for the temporary disruption and any frustration caused."

Darkside is the extortionist criminal gang that targeted the US Colonial Pipeline company, operators of an oil conduit on America's east coast that supplied just under half of the region's daily refined petroleum needs.

Following that attack and the furious response from the US, Darkside used its Tor-hosted stolen data repository to announce it was shutting down its operations, as conveyed to the wider world by a blog affiliated to infosec firm Recorded Future.

Back in March the Darkside ransomware was seen targeting VMware ESXi hypervisors, according to infosec firm Crowdstrike.

News URL

https://go.theregister.com/feed/www.theregister.com/2021/05/21/darkside_ransomware_doncaster/