Leak-site post naming Formulatrix, captured by ThreatCluster

Formulatrix

everest

Ransomware leak-site victim intelligence · EN

Data size
455.76 GB
Files
19,285
Views
34,000
Posted
Jul 6, 2024
Countdown
The files will be published after the timer counts down. The company still has time to get in touch with us
Country
US
Industry
Technology

Summary

Written by ThreatCluster from site fields, file listing, victim profile, leak post, screenshot, ransom note

Everest claims Formulatrix is a victim, stating 455.76 GB across 19,285 files in the FTP/product-distribution layer and GitLab/source archives. The leak page describes a broad data set including product repositories, firmware and driver files, runtime configurations, application notes, help documentation, QA/release folders, datasets, calibration tools, and public patent references. The post indicates a countdown for publication, with the files to be published after the timer counts down, and notes that Formulatrix is named as the victim.

Describes what the group claims on its leak site. A listing is not confirmation that a breach occurred.

Victim profile

Platforms
GitLab STM32/CAN RockMaker RockImager FORMULATOR NT8 uPULSE

What was taken

Formulatrix listed as a victim on Everest leak site; page describes 455.76 GB across the FTP/product-distribution layer and GitLab/source archives, with a timer countdown for data publication.

Data categories
Filesarchivesproduct repositoriesGitLab/source archivesfirmware packagesdriver filesdevice-definition filesruntime configurationsapplication noteshelp documentationQA/release foldersdatasetscalibration toolspublic patent references
Leak site tags
gemaltorockmakerformulatorrockimager

Ransom note

Published by the group on their leak site, reproduced verbatim.

The files will be published after the timer counts down. The company still has time to get in touch with us

Also stated on the leak page

Fields this group publishes that do not map to a standard column. Labels are the site's own.

"Formulatrix Jul 6 2 posts 34k"
Formulatrix Jul 6 2 posts 34k
"The FTP/product-distribution layer contains 19,285 files totaling 455.76 GB."
The FTP/product-distribution layer contains 19,285 files totaling 455.76 GB.
"The files will be published after the timer counts down. The company still has
The files will be published after the timer counts down. The company still has time to get in touch with us

Leak-site images (11)

Images from the victim's leak listing. Thumbnails scraped from the onion page are blurred by default — click a thumbnail to view.

ThreatCluster capture
onion leak page 11 KB
Logo of Keysight Technologies featuring a red waveform graphic and the company name in white text.
onion leak page 128 KB
onion leak page 11 KB
Logo featuring the text "mansfield" in a stylized font, with "FAMILY DENTISTRY" below it.
onion leak page 1.4 KB
Logo featuring a stylized letter "P" with an arrowhead design in black and orange colors.
onion leak page 7.5 KB
onion leak page 5.8 KB
Logo featuring the text "Al-Futtaim" in blue, with "automotive" in a smaller font below it, accompanied by a geometric symbol.
onion leak page 5.6 KB
The image features a logo with stylized figures in orange and blue, representing people, alongside the text "ALZONE" in a bold blue font.
onion leak page 7.0 KB
Logo of Emirates Flight Catering, featuring stylized text and a decorative emblem.
onion leak page 6.8 KB
Logo of Dharma Group featuring a stylized design with blue and green colors, accompanied by the text "DHARMA GROUP" below it.
onion leak page 7.7 KB