Ransomware Group: CACTUS

VICTIM NAME: massdevelopment[.]com

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the CACTUS Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page pertains to the entity identified as MassDevelopment, the finance and development agency for the state of Massachusetts, USA. Established to support economic growth by collaborating with various sectors including businesses and nonprofits, MassDevelopment has financed numerous projects resulting in significant economic contributions to the state. Notably, between FY2017, the agency financed or managed 377 projects, leading to investments exceeding $4 billion, estimated to create approximately 9,488 jobs and 1,863 residential units. The reported data leak includes sensitive documents potentially affecting both the organization and individuals associated with it.

While specific details regarding the compromise date remain unspecified, the site indicates that around 1.2TB of data has reportedly been disclosed, with less than 1% made public. This data leak allegedly contains personal identifiable information along with various confidential documents such as corporate records, employee data, contracts, non-disclosure agreements, and other sensitive financial documents. The presence of six images suggests additional supporting evidence was shared, although their specific content has not been described in detail. The data’s availability through specific download links was not confirmed on this leak page.