
We are working on restoring them as quickly as possible.”Ĭalifornia DMV’s director Steve Gordon said: “We are looking at additional measures to implement to bolster security to protect information held by the DMV and companies that we contract with.” Its website remains offline, with a short message: “The website for AFTS and all related payment processing website are unavailable due to technical issues. TechCrunch contacted the Cuba ransomware group but has not yet heard back.ĪFTS could not be immediately reached for comment. “It’s a huge problem, and it’s a problem that will likely only get worse unless decisive action is taken.” “Many others will have paid to prevent it being published,” he said. Whether they have been successful in this, however, is not clear.”Ĭallow said his company’s own data shows more than 1,300 public and private sector organizations had data published on leak sites during 2020. While most groups simply publish stolen data, Cuba attempts to sell it in some cases. The ransomware is secure, meaning data encrypted it cannot be recovered unless the ransom is paid. “They may, however, have been operating prior to that as some of the data they claim that some of the data they have published was stolen the month prior. “Cuba is a data-exfiltrating ransomware group that we first noticed in December 2019,” Callow told TechCrunch. But since many companies have backups, some ransomware groups steal sensitive internal data and threaten to publish the stolen files online unless the ransom is paid. Ransomware typically encrypts a company’s files and will unlock them in exchange for a ransom. The Cuba ransomware leak site, claiming it hacked and stole internal financial and tax data from AFTS.
