Ransomware Group: HELLCAT

VICTIM NAME: Pinger – USA

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the HELLCAT Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The ransomware leak page detailing the breach of Pinger, a telecommunication company in the United States, asserts that the group known as “hellcat” has compromised the organization, acquiring a substantial 111 GB of sensitive data. This data breach includes the personal records of over 9 million users, incorporating private messages, voice messages, and access to various internal tools such as a phone number lookup service and notification systems. Notably, the source code and backend systems of the company have also been accessed. Due to the company’s refusal to pay the ransom, all stolen data has been made publicly available on the dark web.

The breach was discovered on December 25, 2024, shortly before the data was published. The statistics associated with the leaked data are alarming, indicating that 3,066 users are potentially impacted, with specific information about two employees and two third-party entities also being disclosed. The leak demonstrates a severe vulnerability in Pinger’s data security protocols, emphasizing the critical need for robust safeguards in telecommunication companies to protect user information from malicious actors. The absence of a ransom payment led to the extensive public exposure of this sensitive information, drawing attention to the risks and consequences of ransomware attacks in the digital age.