Skip to content
Leak-site post naming Alzone Software, captured by ThreatCluster

Alzone Software

everest

Ransomware leak-site victim intelligence · EN

Data size
145 GB
Views
66,000
Posted
Jul 18, 2024
Countdown
The timer counts down.
Industry
Technology

Summary

Written by ThreatClusterfrom file listing, victim profile, leak post, screenshot, ransom note

Everest group's leak claims 145 GB of Alzone Software data has been exfiltrated and will be published on a countdown timer. The data categories claimed include HR, financial, healthcare and customer/vendor data, along with project and process documentation, RPA/bot materials, sales/proposals and logistics. The leak page states the publication status is countdown, with the files to be released once the timer expires.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
alzonesoftware.com
Platforms
Automation Anywhere Python LLM

What was taken

The Alzone Software archive contains 145 GB of data. The data represents a corporate, client-delivery, RPA, automation, software-development, support, sales, consulting, analytics and project-implementation environment associated with Alzone Software and its business-process automation work for corporate clients. The archive includes 23,329 image files, 14,020 code / runtime / web-script files, 5,657 spreadsheet / data-table files, 1,849 PDF files, 1,110 Word / text documents, 645 video files, 597 presentation files, 249 email files, 142 audio / project-media files, 127 diagram / process-flow files, 98 Alteryx / analytics files, 56 database / backup files and other technical, project, media and business formats. The data covers RPA and process automation repositories, Automation Anywhere bot materials, client project folders, support-team archives, PDD / PUD / SDD / BRD documentation, UAT / SIT / testing materials, process recordings, code backups, Python / LLM / AI workspaces, Alteryx / analytics files, sales and POC materials, client proposals, implementation documents, meeting recordings, sample datasets, finance and logistics process documents, customer / vendor exports and operational email samples. 1. Business and Operational Coverage The archive represents Alzone Software’s delivery environment for corporate process automation, RPA implementation, business-analysis documentation, support operations, client onboarding, automation development, technical troubleshooting, sales discovery, POC delivery and post-production maintenance. The materials include process definition documents, solution design documents, implementation templates, deployment documents, test cases, UAT materials, process recordings, code backups, support trackers, monthly reports and client-specific automation repositories. The work areas include business-process automation for logistics, finance, HR, invoice processing, supplier reconciliation, customer master data, healthcare claims, shipping bookings, tariff processing, bank reconciliation, sales order processing, SAP workflows, Outlook email workflows, Excel-based processing and rule-based RPA logic. 2. Client and Delivery Areas 2.1 Allcargo US Logistics Automation The Allcargo US project block contains 394 Allcargo-related file records with a total volume of 5 GB. The data covers logistics and freight-forwarding automation workflows, including AMS queries, ERD cut-off processing, external tariff distribution, manifest reminder sending, prebooking-to-booking workflows, SSL carrier booking, update sailing, track-and-trace processes and related support materials. The project data includes process design documents, deployment documents, signed-off process flows, test cases, UAT sign-off records, carrier master files, macro templates, carrier booking samples, shipping-line email samples, office master files, review feedback, issue trackers, production deployment checklists and support documentation. The logistics data covers carrier booking updates, cutoff changes, booking confirmations, schedule updates, tariff records, carrier navigation materials and client booking samples. 2.2 Alzone Support Team and Murata Support Operations The support-team area contains support checklists, daily trackers, monthly reports, resource-effort files, client POC materials, action items, AMC trackers, RCA documents, change requests, monitoring records and bot-support handover materials. Murata materials are represented by 101 file records with a total volume of 3 GB. The Murata data includes MIP production code backups, Automation Anywhere bot folders, enquiry automation packages, SAP login automation metadata, quotation registration workflows, PI processing logic, customer identification components, Outlook wrapper components, Excel preprocessing functions, rule metadata, PDF extraction bots, email-processing materials and support records. This part covers operational automation maintenance, issue tracking, RCA documen

Data categories
RPA and process automation materialsclient project folderssupport-team archivesPDD / PUD / SDD / BRD documentationUAT / SIT / testing materialscode backupsPython / LLM / AI workspacesAlteryx / analytics filessales and POC materialsclient proposalsimplementation documentsmeeting recordingssample datasetsfinance and logistics process documentscustomer / vendor exports and operational email samplesHR-related documents
Leak site tags
RPAAutomationSAPClient projects
File types seen
doc × 1,110eml × 249mp3 × 142mp4 × 645pdf × 1,849pptx × 597xlsx × 5,657

Ransom note

Published by the group on their leak site, reproduced verbatim.

The files will be published after the timer counts down. The company still has time to get in touch with us

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

timer_message
The files will be published after the timer counts down.

Leak-site images (11)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
onion leak page11 KB
Logo of Keysight Technologies featuring a red waveform symbol and the company name in white text.
onion leak page128 KB
onion leak page11 KB
Logo featuring the text "mansfield" in a stylized font, with "FAMILY DENTISTRY" below it.
onion leak page1.4 KB
Logo featuring a stylized letter "P" with an arrowhead design in black and orange colors.
onion leak page7.5 KB
onion leak page5.8 KB
Logo featuring the text "Al-Futtaim" in blue, with the word "automotive" in a smaller font below it, accompanied by a geometric symbol.
onion leak page5.6 KB
The image features a logo with stylized figures in orange and blue, representing people, alongside the text "ALZONE" in a bold, blue font.
onion leak page7.0 KB
Logo of Emirates Flight Catering, featuring stylized text in gold and red.
onion leak page6.8 KB
Logo of Dharma Group featuring a stylized design with blue and green colors, accompanied by the text "DHARMA GROUP" below it.
onion leak page7.7 KB