Rhysida’s Brazen Tactics
The Rhysida ransomware operation, first observed in July 2023, has quickly gained notoriety for its aggressive tactics. In the case of Engedi, the gang listed the Mackay-based organisation as one of its latest victims on August 22, alongside exfiltrated documents from Engedi’s network. Rhysida’s darknet leak site featured a chilling message:
“With just seven days on the clock, seize the opportunity to bid on exclusive, unique, and impressive data. Open your wallets and be ready to buy exclusive data. We sell only to one hand, no reselling, you will be the only owner!”
The gang demanded a ransom of 10 bitcoin (approximately $940,000 AUD) within seven days, putting immense pressure on Engedi and anyone else interested in purchasing the data to prevent further dissemination.
Proof-of-Hack Documents Reveal Extent of Breach
While the proof-of-hack documents shared by Rhysida were low-resolution, making them difficult to decipher, several key details were evident:
- Multiple passport scans
- Various identity documents
- An account application
- A credit card scan
Disturbingly, at least one of the identity documents appears to belong to an Engedi staff member, underscoring the deeply personal nature of this breach.
Engedi’s Vital Role in the Community
Engedi, a not-for-profit organisation operating since 1985, provides crucial services to the disability community, including:
- Group skills programs
- Therapy support and coordination
- NDIS plan management
- Individual support
With locations in Beaconsfield (Engedi Support Services) and Mount Pleasant (Engedi Therapy Hub), the organisation plays a vital role in supporting Queensland’s disabled population.
Rhysida’s Growing Threat
The attack on Engedi is just one of 14 claimed by Rhysida this month alone, with other high-profile victims including The Washington Times and the Sumter County Sheriff’s Office in the United States. Since its emergence, the gang has claimed responsibility for a staggering 139 attacks, primarily targeting U.S.-based organisations.
Protecting Your Business from Cyber Threats
As the Engedi incident demonstrates, no organisation is immune to the threat of cyber attacks. Melbourne businesses must prioritise cybersecurity to safeguard their data, reputation, and the well-being of their employees and clients. Spark Computers offers comprehensive IT security solutions tailored to the unique needs of Melbourne businesses, helping you stay one step ahead of cybercriminals.
Don’t wait until it’s too late. Contact Spark Computers today to learn how our expert team can fortify your defences and provide peace of mind in an increasingly digital world. Together, we can create a safer tech environment for all Melburnians.
