company logo

Product

Our Product

We are Reshaping the way Developers find and fix vulnerabilities before they get exploited.

Solutions

By Industry

BFSI

Healthcare

Education

IT & Telecom

Government

By Role

CISO

Application Security Engineer

DevsecOps Engineer

IT Manager

Resources

Resource Library

Get actionable insight straight from our threat Intel lab to keep you informed about the ever-changing Threat landscape.

Subscribe to Our Weekly Threat Digest

Company

Contact Us

Have queries, feedback or prospects? Get in touch and we shall be with you shortly.

loading..
loading..
loading..
Loading...

Coca-Cola

loading..
loading..
loading..

Coca-Cola investigating 161GB data breach claimed by STORMOUS group

Coca-Cola reportedly lost 161GB of data claimed to have been stolen by STORMOUS ransomware group in a cyberattack that is currently being investigated…

27-Apr-2022
3 min read

Coca-Cola officially confirmed the cyberattack incident in its network in an investigation of data breach reports after a ransomware group claimed to have stolen documents from the world's largest soft drinks maker.Coca-Cola officially confirmed the cyberattack incident in its network in an investigation of data breach reports after a ransomware group claimed to have stolen documents from the world's largest soft drinks maker.

An investigation was launched by Coca-Cola soon after the Stormous gang claimed to have successfully established unauthorized access to part of the company's servers and had been attempting to sell stolen 161GB of data. On their leak site, the threat actors offered a cache of the data for sale for 1.65 Bitcoin, which is presently worth roughly $64,000. There are other compressed documents, text files including the administrator, email, and password information, account and payment ZIP archives, and other forms of sensitive information in addition to the files listed.

stormous-coca-cola.png

cola-tor.jpg

Stormous Ransomware Group

Stormous, a data extortion gang, has declared that in the aftermath of the invasion of Ukraine, they will take action against hacking assaults against Russia, implying that the operators of this ransomware business are fully supportive of the Russian government during the invasion.

poll.png

Despite their claims of being a ransomware outfit, there is no evidence that they are using file-encrypting malware on their victims' networks.

"The STORMOUS team has publicly stated their support for Russia's government. And if any party in various regions of the world decides to launch a cyberattack or cyberattacks against Russia, we will be moving in the right route and will make every attempt to abandon the West's requests, particularly infrastructure," the operators have warned in a message in March. "Perhaps the hacking operation our team carried out for the Ukrainian government and a Ukrainian airline was simply a small operation, but what's to come will be far bigger!!"

stormous-declaration.png

This is the first time Stormous has released a data set that has been stolen. The group urged its supporters to vote on who should be their next victim last week. The attack promised a denial-of-service attack, as well as hacking and the disclosure of software source code and client information. Coca-Cola received 72 percent of the vote in the poll. The gang claimed they simply needed a few days to break into the company. Coca-Cola, like the other victims chosen in Stormous' poll, is anti-Western. The group had previously claimed Epic Games as a victim.

They claimed to have stolen 200 gigabytes of data and the personal information of 33 million Epic store and game users. However, there has been no confirmation of the data's veracity; therefore, Stormous' reputation in relation to these assertions is unknown.

While Coca-Cola has not validated the claims of a data breach, they have stated that they are working with law authorities and that the investigation into the suspected Stormous assault has yet to discover any negative consequences.