Leak-site post naming Alzone Software, captured by ThreatCluster
Back to victims

Alzone Software

everest

Ransomware leak-site victim intelligence · EN

Data size
145 GB
Views
31,000
Posted
Jul 18, 2024
Countdown
The files will be published after the timer counts down.
Industry
Technology

Summary

Written by ThreatCluster from file listing, victim profile, leak post, screenshot, ransom note

Everest group's leak claims 145 GB of Alzone Software data has been exfiltrated and will be published on a countdown timer. The data categories claimed include HR, financial, healthcare and customer/vendor data, along with project and process documentation, RPA/bot materials, sales/proposals and logistics. The leak page states the publication status is countdown, with the files to be released once the timer expires.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Domains
alzonesoftware.com
Platforms
Automation Anywhere Outlook Excel SAP Python / LLM Alteryx

What was taken

The Alzone Software archive contains 145 GB of data. The data represents a corporate, client-delivery, RPA, automation, software-development, support, sales, consulting, analytics and project-implementation environment associated with Alzone Software and its business-process automation work for corporate clients. The archive includes 23,329 image files, 14,020 code / runtime / web-script files, 5,657 spreadsheet / data-table files, 1,849 PDF files, 1,110 Word / text documents, 645 video files, 597 presentation files, 249 email files, 142 audio / project-media files, 127 diagram / process-flow files, 98 Alteryx / analytics files, 56 database / backup files and other technical, project, media and business formats. The data covers RPA and process automation repositories, Automation Anywhere bot materials, client project folders, support-team archives, PDD / PUD / SDD / BRD documentation, UAT / SIT / testing materials, process recordings, code backups, Python / LLM / AI workspaces, Alteryx / analytics files, sales and POC materials, client proposals, implementation documents, meeting recordings, sample datasets, finance and logistics process documents, customer / vendor exports and operational email samples.

Data categories
HR datafinancial datahealthcare datamedical-claims datasupplier datavendor datacustomer data / master dataproject / process documentation (PDD / PUD / SDD / BRD)RPA / bot materialssales / POC / proposalslogistics data
Leak site tags
RPAAutomationSAPClient projects

Ransom note

Published by the group on their leak site, reproduced verbatim.

The files will be published after the timer counts down. The company still has time to get in touch with us

Leak-site images (11)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
onion leak page 11 KB
Logo of Keysight Technologies featuring a red waveform symbol and the company name in white text.
onion leak page 128 KB
onion leak page 11 KB
Logo featuring the text "mansfield" in a stylized font, with "FAMILY DENTISTRY" below it.
onion leak page 1.4 KB
Logo featuring a stylized letter "P" with an arrowhead design in black and orange colors.
onion leak page 7.5 KB
onion leak page 5.8 KB
Logo featuring the text "Al-Futtaim" in blue, with the word "automotive" in a smaller font below it, accompanied by a geometric symbol.
onion leak page 5.6 KB
The image features a logo with stylized figures in orange and blue, representing people, alongside the text "ALZONE" in a bold, blue font.
onion leak page 7.0 KB
Logo of Emirates Flight Catering, featuring stylized text in gold and red.
onion leak page 6.8 KB
Logo of Dharma Group featuring a stylized design with blue and green colors, accompanied by the text "DHARMA GROUP" below it.
onion leak page 7.7 KB