BlackCat/ALPHV Ransomware Victim: Ultra Intelligence & Communications

Description

• Ultra I&C business being sponsored by classified person who is related to or works at the US government. Ultra I&C provides cybersecurity, multi-domain communications, card-access to military units, radio solutions, voice recognition solutions for military purposes. The network of Ultra I&C was breached by our team and about 30GB of sensitive data was stolen from there. We had enough time to put our hands on some interesting papers. Stolen data specified below: – Audit data: – 401k audits – Group IC H1 Audit for 2023 – revenue and gross margin – cashflow – bank statements – subcontractors related documents – Financial data: – money transfers – statements – payments – cashflow – bank statements – credit cards statements and payments – active finance programs – Costpoint – accounts payable – accounts receivable – fixed assets – revenue – testing – pool processing – inventory – Project data: – budgets and planning for recent and upcoming years – project benefit calculations – project presentations – engineering tasks – product development – product tests – risk assessment – CARDS software data – documents marked as “Ultra Proprietary Information” – projects for ATS – projects for Prologic – voice recognition software development – military audio recordings sample provided for voice recognition software tests – voice recognition to .json software development – Employee data: – worker compensations – personal bank statements – insurance data – salaries – letters – orgcharts – Contracts related data: – contracts with vendors and customers worldwide – non-disclosure agreements worldwide – contract extensions and amendments – contract related letters and correspondence – foreign agents agreements – bond guarantees – list of companies and organizations could be found within stolen data: – Prologic, Inc. – NEC – FBI – DEA – NATO – AT&T – CIS – CIS Poland – CIS Belgium – CIS Bulgaria – Switzerland – Glotech Taiwan – Royal saudi Naval Force – ABM Building Services – Jama Software, Inc – GET Engineering Corp. – Randstad RiseSmart – SeaCorp – C2I UK – Aeronautics – Israel – Aerotek Government Services – NGLD Base – Swiss government – other companies related to military and intelligence federal worldwide services Ultra’s top management was offered to pay to protect this data, but after long lasted negotiation process Ultra refused to pay to recover stolen data and protect its reputation. This is why today all the stolen data related to Ultra Intelligence & Communications and its affiliates being released to public within this data-leak blog. Every contractor who works with the US government should be warned about this incident and should avoid any further business with the Ultra Intelligence & Communications if they don’t want US federal secrets went public. The US government itself should probably reevaluate their contracts and relations with the subcontractors.