Ransomware Group Claims Responsibility for Breaching Sony, Threatens to Release Sensitive Data

The RANSOMEDVC ransomware group has claimed responsibility for breaching Sony Group Corporation, a major Japanese conglomerate. This announcement was made on both clearnet and dark web platforms, asserting their complete infiltration of Sony's systems. 

Unlike typical ransomware attacks, RANSOMEDVC is opting to monetize stolen data due to Sony's alleged non-compliance with their demands. While the extent of the breach remains unverified, leaked data includes a Sony Quality Assurance Division PowerPoint presentation, internal screenshots, Java files, and more.

RANSOMEDVC, active since at least 2023, is notorious for aggressive tactics, threatening to release sensitive data if their ransom demands aren't met. They've targeted various sectors, from healthcare to finance. This development follows an FBI and CISA advisory on the Snatch Ransomware group, highlighting the growing ransomware threat.

Sony has been a recurring target for cybercriminals due to its global popularity. In the past, it suffered a significant data breach exposing executive and employee data. In 2021, three North Korean hackers were charged for their involvement in hacking Sony Pictures.

This incident underscores the pervasive ransomware threat, urging organizations of all sizes to establish robust cybersecurity strategies to protect themselves from such attacks.