Presunta extorsión de ALPHV/BlackCat contra C.A. de Seguros La Occidental

Qué respalda esta fuente

• the exact URL duplicates evidence AtVec7wQk1ds-xNgdCvKs
• the preserved actor-page capture visibly names C.A. de Seguros La Occidental and displays 21 April 2023
• the capture visibly presents alleged document samples

Límites de la evidencia

Duplicate/misattributed provenance row retained for audit continuity. The capture is evidence of the actor claim only and does not authenticate the apparent documents.

Relación con el caso

Preserves the legacy Hackmanac provenance mismatch without counting the identical URL as independent corroboration.

Qué respalda esta fuente

• FalconFeeds.io reported that ALPHV added C.A. de Seguros La Occidental and laoccidental.com to its victim list
• the visible post repeats actor claims concerning insurance, personal, financial, contract, database and customer data
• the four images reproduce the ALPHV listing, alleged categories, threat and 27-attachment summary

Límites de la evidencia

Security-feed reproduction of an actor claim. Neither the post nor its images authenticate the alleged files or establish execution of ransomware or exfiltration.

Relación con el caso

Direct accessible provenance for the 21 April ALPHV claim, victim domain and categories asserted by the actor.

Qué respalda esta fuente

• BreachSense lists laoccidental.com as claimed by ALPHV
• the tracker discovery date is 24 April 2023
• the dedicated page reports leak size as unknown

Límites de la evidencia

Secondary tracker derived from actor/leak-site monitoring. Its later credential statistics concern external breaches and combo lists and do not evidence this incident.

Relación con el caso

Corroborates the public victim/domain/actor listing and later discovery date only.

Qué respalda esta fuente

• Ransomware.live identifies La Occidental as claimed by ALPHV and separately displays the actor-page date 21 April 2023
• the preserved screenshot shows 27 apparent sample images including identification, insurance, bank-receipt and spreadsheet material
• Ransomware.live states it indexes public operator material and does not hold the underlying content

Límites de la evidencia

Preserved actor-site screenshot establishes the public claim and visible apparent samples, not authenticity, source, chain of custody, completeness or a technical compromise.

Relación con el caso

Strongest accessible direct preservation of what ALPHV publicly claimed and displayed.

Qué respalda esta fuente

• DataBreaches reported that La Occidental was added to the BlackCat leak site on 21 April
• the author observed 27 screenshots including insurance documents and identification cards
• DataBreaches found no victim notice and received no response to emails sent on 21 and 25 April

Límites de la evidencia

Independent editorial observation of the actor page and unsuccessful victim outreach; it does not authenticate samples or confirm the underlying intrusion.

Relación con el caso

Useful independent observation of the listing, screenshot count and absence of victim confirmation.