Engineering Firm, Pickett and Associates, Attacked, Stolen Info For Sale

A Tampa, Florida-based civil engineering, surveying, and geospatial services firm for utilities and mining operations, suffered a cyberattack and had sensitive client data stolen.
Threat actors posted a new thread on a dark web forum Monday claiming to have stolen more than 800 files from the engineering firm, Pickett and Associates, according to a report from Tech Radar. The data is “real, operational engineering data from active projects of major utilities and is suitable for infrastructure analysis and risk assessment,” the attackers said on their site.
The attacker in this case is Zestix, which also has links to the online persona Sentap, according to Hudson Rock, which specializes in cybercrime intelligence, safeguarding against infostealer-based cyberattacks. The threat actor is an initial access broker (IAB) which also exfiltrates victim data and sells it on hacker forums.

Estimated Cost

The attackers are selling the stolen files for 6.5 bitcoin, which is about $600,000.

Threat Source

Impacts

IT