[France] Ransomware gang demanded payment in baguettes

Ordinarily, ransomware gangs demand cryptocurrency payments but one gang has broken with this norm by asking a French corporation to pay it in “baguettes” after the group allegedly stole 40GB of user data, PC Mag reports.

On November 4, a newly formed ransomware gang called Hellcat claimed to have breached Schneider Electric, a major industrial and energy equipment provider. In common with other such groups, Hellcat promised it would delete the stolen data if the company paid up.  

More unusually, however, Hellcat’s ransom demand reportedly asked the French organisation to pay its $125,000 ransom in bread form. Twitter accounts believed to be affiliated with Hellcat emphasise that the payment should be made in baguettes. 

On its website, Hellcat said, “This breach has compromised critical data, including projects, issues, and plugins, along with over 400,000 rows of user data, totaling more than 40GB Compressed Data.” 

The gang also reportedly claims to have infiltrated Schneider Electric by accessing its Atlassian Jira server.

Schneider Electric confirmed to BleepingComputer that it is investigating “a cybersecurity incident involving unauthorized access to one of our internal project execution tracking platforms which is hosted within an isolated environment.”

"Our Global Incident Response team has been immediately mobilized to respond to the incident. Schneider Electric's products and services remain unaffected,” the company said. 

Source: PC Mag

Ordinarily, ransomware gangs demand cryptocurrency payments but one gang has broken with this norm by asking a French corporation to pay it in “baguettes” after the group allegedly stole 40GB of user data, PC Mag reports.

On November 4, a newly formed ransomware gang called Hellcat claimed to have breached Schneider Electric, a major industrial and energy equipment provider. In common with other such groups, Hellcat promised it would delete the stolen data if the company paid up.  

More unusually, however, Hellcat’s ransom demand reportedly asked the French organisation to pay its $125,000 ransom in bread form. Twitter accounts believed to be affiliated with Hellcat emphasise that the payment should be made in baguettes. 

On its website, Hellcat said, “This breach has compromised critical data, including projects, issues, and plugins, along with over 400,000 rows of user data, totaling more than 40GB Compressed Data.” 

The gang also reportedly claims to have infiltrated Schneider Electric by accessing its Atlassian Jira server.

Schneider Electric confirmed to BleepingComputer that it is investigating “a cybersecurity incident involving unauthorized access to one of our internal project execution tracking platforms which is hosted within an isolated environment.”

"Our Global Incident Response team has been immediately mobilized to respond to the incident. Schneider Electric's products and services remain unaffected,” the company said. 

Source: PC Mag