Young Consulting, now known as Connexure, is sending data breach notifications to 954,177 people who had their information exposed in a BlackSuit ransomware attack on April 10, 2024.
On April 10, 2024, Young Consulting’s systems were compromised by a ransomware attack orchestrated by a group known as BlackSuit. The breach went undetected for three days until the attackers encrypted the company’s systems, bringing the incident to light. An extensive investigation followed, which concluded on June 28, revealing the extent of the data compromise. The stolen data includes full names, Social Security numbers, dates of birth, and detailed insurance claim information.
As a result, the company has started notifying the 954,177 affected individuals, offering them a year of complimentary credit monitoring services through Cyberscout. Those impacted have until November 2024 to take advantage of this protective measure. However, the urgency for action is heightened by the fact that BlackSuit has already leaked the stolen data on their darknet extortion portal, putting those affected at further risk.
In response to the breach, the company has advised individuals to be cautious of any suspicious communications, phishing attempts, and potential scams, as the leaked information could be exploited by malicious actors. BlackSuit, which has been linked to previous significant ransomware activities, claimed responsibility for the attack on May 7 and subsequently leaked more data than what Young Consulting initially disclosed. This additional information reportedly includes business contracts, employee passports, and various sensitive personal documents.
The Cybersecurity and Infrastructure Security Agency (CISA) and the FBI have recently identified BlackSuit as a rebranded version of the Royal ransomware group, which has reportedly made over $500 million in ransom demands in the past two years.
