Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Logo

NASHUA SCHOOL DISTRICT

nashua.edu
Group Royal
Discovered 2023-05-18 12:56 UTC
Est. attack date 2023-05-18
Country US
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

The Nashua, New Hampshire School District is a city of 88,000 residents with much to offer. Most notably, the City has a long tradition of supporting public education, both with resources and volunteers. The School District doesn't need it's 728GB of data containing SSNs, passports, forms with personal data both of employees and students. Confidential document and a crazy amount of databases will be uploaded here as well. Stay in touch.
Infostealer activity detected by HudsonRock

Compromised Employees: 12

Compromised Users: 90

Third Party Employee Credentials: 42

External Attack Surface: 26

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • d195443b.ess.barracudanetworks.com. Barracuda
  • d195443a.ess.barracudanetworks.com. Barracuda
TXT Records
  • autodesk-domain-verification=lRn8H-KGWLo88yofIKYU
  • google-site-verification=0OZ8YkSZFg7bONHYZmM68PuJN59RV3njT2TtubuXY28
  • apple-domain-verification=3UutUTOJG0HhZz8l
  • duo_sso_verification=rl2iXETLmPpNBgWySfYaK6Fd3K9d4IFriPfncPKHBBbZlBaYA4UvgBmDRIteRffM
  • v=spf1 mx a include:_spf.bbnotify.net include:spf.protection.outlook.com include:spf.ess.barracudanetworks.com ~all
  • cisco-ci-domain-verification=2476a9cf715fa31e347b54cb463f324bc5250f4549e6e0cec9ae0486519bfc62
Cloud / SaaS Services Detected
Apple Autodesk Cisco Cisco Duo

Leak Screenshot:

Leak Screenshot

Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.