Queensland, November 13, 2024 – The Akira ransomware gang has claimed responsibility for a cyber attack on Followmont Transport, a transport company based in Queensland, alleging the theft of 230 gigabytes of sensitive data.
The gang announced the breach on its darknet leak site, stating that the stolen data includes non-disclosure agreements, passports, driver licenses, medical documents, and detailed financial information. However, they did not specify a ransom demand or a timeline for the publication of the stolen data.
Followmont Transport has confirmed the incident, stating it became aware of unauthorized access to its systems in October. The company promptly reported the breach to the Australian Cyber Security Centre (ACSC) and the Office of the Australian Information Commissioner (OAIC). Despite the breach, Followmont’s systems remain fully operational, and the company is actively monitoring its network for further activity.
A spokesperson for Followmont Transport emphasized their commitment to cybersecurity and the importance of keeping stakeholders informed throughout the investigation. The company is working to verify the claims made by the Akira gang and has urged interested parties to refrain from accessing the threat actor’s leak site, highlighting the risks associated with such actions.
The Akira ransomware group has been relatively quiet since early October, with the Followmont Transport attack marking its first significant activity since then. The group, which operates as a ransomware-as-a-service entity, has a history that traces back to the Conti ransomware operation, which disbanded in 2022. Ransom demands from Akira can range from $200,000 to over $4 million.
Followmont Transport operates a substantial fleet of over 1,000 vehicles and serves a diverse customer base, including major clients like Australia Post and Dulux. The company has nearly 1,000 employees and boasts a customer portfolio of more than 20,000.
The incident underscores the ongoing threat posed by ransomware gangs and the importance of robust cybersecurity measures for organizations of all sizes.
