Flink Data Breach Leads to Triple Extortion Scheme

• •LPG Group claims to have stolen data from over one million Flink customers.
• •The breach involved unauthorized access to Flink's internal systems without compromising passwords.
• •Hackers are employing a triple extortion tactic, targeting both the company and affected individuals.

Cybercriminals from the LPG Group have reportedly stolen personal data of over one million Flink customers and 13,000 employees. The breach exposed names, email addresses, postal addresses, and delivery instructions, but account passwords and payment information were not compromised. Flink confirmed unauthorized access to its internal systems and has initiated countermeasures, including an investigation with cybersecurity experts. The hackers are demanding 100 Ethereum (approximately €238,000) from Flink and 0.005 ETH (about €10) from individual victims, threatening to sell the stolen data on the dark web if payments are not made by October 2. Flink has advised customers against responding to the ransom demands and is cooperating with law enforcement. The LPG Group's attack method reportedly involved compromised login credentials from a Flink employee.