South Carolina credit union says 240,000 impacted by recent cyberattack

Category	Details
Threat Actors	Nitrogen ransomware gang
Campaign Overview	Cyberattack on SRP Federal Credit Union, leading to data theft of over 240,000 individuals.
Target Regions (Victims)	SRP Federal Credit Union customers, primarily in South Carolina, U.S.
Methodology	Network intrusion over a two-month period (September 5 - November 4, 2024); potential ransomware attack targeting sensitive data.
Product Targeted	SRP Federal Credit Union systems (non-core processing and online banking systems).
Malware Reference	Nitrogen ransomware gang claims involvement; no confirmation from SRP.
Tools Used	Techniques used by Nitrogen ransomware gang (specific tools not disclosed).
Vulnerabilities Exploited	Undisclosed vulnerabilities exploited to infiltrate SRP Federal Credit Union systems.
TTPs	➡ Prolonged network access to extract sensitive files ➡ Claiming data exfiltration publicly ➡ Leveraging stolen data for extortion or sale.
Attribution	Nitrogen ransomware gang attributed based on public claims; confirmation pending from SRP.
Recommendations	➡ Enhance network monitoring and detection mechanisms ➡ Immediately notify affected individuals ➡ Review and secure all systems, including data access points.
Source	The Record

Read full article: https://therecord.media/south-carolina-credit-union-data-breach
The above summary has been generated by an AI language model