The cyber skids at INC Ransom claim responsibility for the ongoing Leicester City Council cyber security incident, according to a post caught by eagle-eyed infosec watchers.
Hundreds arrested in connection with riots in parts of Great Britain | BBC News
A post made on INC Ransom's leak blog in the late hours of April 1 named Leicester City Council as a victim of the ransomware group – the first indication that the local authority's IT incident involves an established cyber crime gang.
The note also mentioned that the attackers claimed to have stolen 3 TB of municipal data before deleting it shortly after going live.
Deploying a victim to a breach site and quickly removing it is a process known as "flashing" and is typically used to elicit responses from leadership teams who may have remained silent during the ransom negotiation phase.
