Ransomware

BlackCat Claims Responsibility for Attack on La Occidental Insurance Agency

In April 2023, the Venezuelan insurance company C.A. de Seguros La Occidental suffered a ransomware attack by the BlackCat/ALPHV threat group. The attackers claimed responsibility for the breach on their leak site on April 21, 2023, exposing confidential data, including Venezuelan ID cards, SENIAT RIF documents, Banesco receipts, and internal spreadsheets.

Overview

Missing evidence

The exact date of the network's initial launch is not specified.It is unknown whether the incident resulted in property damage or whether a ransom was paid.

Impact details

The ALPHV/BlackCat leak site and trackers claim that confidential data was stolen from La Occidental; no official confirmation from the victim or forensic validation has been found.

attached insurance documentsalleged identity documentsalleged tax documentsalleged financial documents

Classification & severity

Category
Malicious code
Subtype
Ransomware
Confidence
Medium

Ransomware/extortion listing or leak-site claim; the extent of the impact varies depending on public validation.

Severity assessment

Medium
Information impact
Proprietary data
Affected scope
Organization-wide
Critical service
None
Public confidence
Limited
Recoverability
Extended

Ransomware/extortion claim; the confidence level and severity are higher when the media has reported that files have been published.

Data exfiltration· Claimed Confidentiality

Timeline

Claim

BlackCat listed C.A. de Seguros La Occidental as an alleged victim.

Evidence & sources

5 sources