Security News > 2021 > December > Conti Gang Suspected of Ransomware Attack on McMenamins

A family-run chain of hotels and restaurants this week has been grappling with the aftermath of a ransomware attack that occurred last weekend that may have exposed employees' sensitive personal data, according to multiple reports.

The incident - which some have attributed to the Conti gang - forced McMenamins to shut down various operations, though locations could still receive customers.

The company confirmed that the attack occurred on Dec. 12 "When cybercriminals deployed malicious software that locked the company's systems and prevented access to critical information," it said in a press statement to various news outlets on Wednesday.

McMenamins has reported the incident to the FBI and is also working with a cybersecurity firm to identify the source and full scope of the attack, the company said.

Though McMenamins has not identified the ransomware group responsible for the attack, a report from Bleepingcomputer said sources have attributed it to the Russia-based Conti group, which Palo Alto Networks has called "One of the most ruthless" of dozens of ransomware groups currently known to be active.

Conti group recently added even more firepower to its ransomware capabilities, honing its ability to destroy backups its victims may have to recover from attacks.

News URL

https://threatpost.com/conti-gang-ransomware-attack-mcmenamins/177119/