Ransomware Breach Hits Bulgaria’s Supreme Administrative Court

A recent cyberattack has targeted the Supreme Administrative Court of Bulgaria, with the hacker group RansomHouse claiming responsibility. The group has allegedly breached the court's information systems, releasing documents that include employee names, personal data, and leave applications. This incident highlights the ongoing threat of ransomware attacks on critical institutions.

Details of the Cyberattack

RansomHouse has posted a listing on their dark web leak site, urging the court's management to contact them. The listing is accompanied by a proof pack, which purportedly contains evidence of the breach. According to cybersecurity sources, the documents released by the hackers serve as proof of the data theft.

Ransomware Involvement

During an extraordinary hearing before the Supreme Judicial Council, Georgi Cholakov, the acting Chairman of the Supreme Administrative Court, confirmed that the court's systems had been compromised by a sophisticated ransomware strain known as White Rabbit. Cholakov suggested that human error might have facilitated the attack, although he refrained from disclosing specific details about the ransom demand.

• Advanced Ransomware: The White Rabbit strain is known for its complexity and effectiveness in encrypting sensitive data.
• Potential Human Error: Initial investigations suggest that human error could have played a role in the breach.

Implications and Concerns

The breach raises significant concerns about the security of sensitive data within governmental institutions. While the leaked documents include information dating back to before 2010, the sensitivity of the data remains a critical question. The court's management has denied any loss of data from the Unified Case Management Information System, but the situation underscores the need for enhanced cybersecurity measures.