ABD Data Breach by Funksec Ransomware Group

ABD (Asociación Bienestar y Desarrollo), a prominent non-profit organization based in Spain, has been targeted by the Funksec ransomware cyber group. Established in 1980, ABD works tirelessly to reduce inequalities and social vulnerabilities, serving over 160,000 individuals annually through its more than 100 programs. This breach has exposed critical data, raising serious concerns about the organization’s cybersecurity measures.

About ABD

ABD is committed to addressing key social challenges, including:

• Drug addiction and mental health support
• Childhood and family assistance
• Gender equality initiatives
• Combating poverty and social exclusion

With a reputation for fostering community well-being, ABD’s work has made a significant impact across Spain.

Details of the Breach

The cyberattack, claimed by the Funksec ransomware group, has resulted in the exfiltration of sensitive data:

• Database Size:
  • 3GB of SQL files containing user records
  • 1GB of PDF documents
• Compromised Information:
  • Full user names and phone numbers
  • Session numbers and other sensitive operational details
• Ransom Demand:
  • $5,000 USD
  • Deadline: January 1, 2025
• Threat:
  • If the ransom is unpaid, the data will be publicly released after the deadline.

Impact of the Breach

1. Privacy Violations: Exposed user data puts individuals at risk of identity theft and other malicious activities.
2. Reputational Damage: The breach undermines trust in ABD’s ability to protect sensitive information.
3. Operational Disruptions: Leaked session details could impact program delivery and effectiveness.

Funksec’s Message

The group has stated that paying the ransom will ensure the data remains private. However, failure to comply will result in the public release of all exfiltrated data, urging ABD to secure its site and protect its users moving forward.

Recommendations for ABD

• Immediate Actions:
  • Notify affected individuals and stakeholders.
  • Collaborate with cybersecurity experts and law enforcement.
• Preventative Measures:
  • Strengthen encryption protocols and server security.
  • Conduct regular security audits and penetration tests.
  • Implement robust employee training on cybersecurity best practices.

• Wireless Network Security
• Xtream.Cloud Data Breach Exposes 19,957 IPTV Providers’ Information
• DragonForce Cyber Gang Exposes 176.85 GB of Sensitive Data from IKAV Asset Management
• Arrest of LockBit Ransomware Developer: A Major Blow to Cybercrime
• Ethria.de Database Leaked on Dark Web