A hacking group known as Dark Angels has orchestrated the largest crypto heist to date, successfully extorting a $75 million ransom from the drug distributor Cencora. The cyberattack, which occurred in February, compromised sensitive data including personally identifiable information (PII) and protected health information.
Cencora, a Pennsylvania-based company, made the ransom payments in three bitcoin transactions last March. The incident was first reported by Bloomberg on Wednesday.
Dark Angels, believed to be a Russian-based cybercrime syndicate, has been active since 2021, targeting companies in various sectors including healthcare, finance, government, and education. The group’s highly targeted approach, focusing on single large companies, sets it apart from other ransomware groups that often indiscriminately target victims.
Security firm Zscaler ThreatLabz identified Dark Angels as the top ransomware threat for 2024, noting that the $75 million ransom paid by the unnamed company was the largest known at the time.
Cencora initially disclosed the hack in a July regulatory filing, acknowledging the exfiltration of sensitive data and the ongoing remediation efforts. While the company believes it has contained the incident, the full extent of the data breach and the number of individuals affected remain unclear.
Also Read: Dark Skippy Attack Explained – 7 Key Stats & Tips to Protect Your Digital Assets
Blockchain sleuth ZachXBT has identified the on-chain payments made to Dark Angels, revealing the details of the ransom transaction.
Ransomware attacks have become a significant problem in the crypto industry, with Chainalysis estimating that over $450 million was lost to such attacks in the first half of 2024. This trend highlights the increasing sophistication of cybercriminals and the urgent need for robust cybersecurity measures.
Disclaimer: The information in this article is for general purposes only and does not constitute financial advice. The author’s views are personal and may not reflect the views of Chain Affairs. Before making any investment decisions, you should always conduct your own research. Chain Affairs is not responsible for any financial losses.
About The Author
