Ransomware

AutoCanada Hunters International Ransomware Attack

πŸ“… 2024-08-11 🦠 Hunters International ransomware
Primary Source β†—

Incident Details

AutoCanada, a publicly traded North American automotive dealership group operating 84 franchised dealerships, detected a ransomware attack on August 11, 2024. Hunters International claimed responsibility on September 17, 2024, threatening to publish 1.4 TB of stolen data including financial documents, HR records, accounting data, and IT infrastructure information. Employee data exposed included names, addresses, dates of birth, payroll details (salaries/bonuses), social insurance numbers, bank account numbers, and government ID scans. Customer and supplier data was also potentially exposed. AutoCanada’s dealerships continued operating during the attack. Company offered 3 years of free Equifax credit monitoring to affected individuals. Automotive retail sector breach with significant employee PII exposure.

Technical Details

Initial Attack Vector
Unknown; Hunters International typically uses phishing and exploits vulnerable internet-facing systems
Malware Family
Hunters International ransomware

Timeline

  1. 2024-08-11 Breach occurred
  2. 2024-09-17 Publicly disclosed
  3. 2024-10-01 Customers notified