What makes this incident even more distressing is that the attackers did not employ their typical tactic of exfiltrating data before encrypting it. There is no evidence to suggest that the data was stolen beforehand, meaning it is irretrievably lost. The identity of the threat actor behind this attack remains unknown, and the demanded ransom amount has not been disclosed. Notably, the victim opted not to pay the ransom, partly due to financial constraints.
As of now, no ransomware group has claimed responsibility for the attack.
