Cyber Analysis Group - CyberAGroup - OSINT Darkweb Investigations  - Insider Threat - Crypto - Online threat & exposure - SOCMINT - Canadian

‹ Back

Following up on our previous post, yesterday evening the ransom group CoinbaseCartel made good on their threat by releasing the personal details, including names, physical addresses, social insurance numbers, and phone numbers, of over a million Canadians.

On their dark web site, CoinbaseCartel simply stated, "They did not want to pay." They also noted, "Full leak coming soon," indicating that more data may yet be released.

 

The data was initially believed to be the result of a recent cyberattack in mid-September. However, it is now more likely that this information originated from the 2019 breach, when an employee stole the personal data of nearly 9.7 million Desjardins customers. Regardless, this release to the public means every malicious actor now has access, and the victims may feel the consequences for years to come.

 

Notably, at the time of this post, there has still been no coverage by any of the major Canadian media outlets. CyberAGroup did reach out to media contacts, and there has been no statement from Desjardins.