Share this article on:
Powered by MOMENTUMMEDIA
For breaking news and daily updates,
subscribe to our newsletter.
Hackers have claimed a cyber attack on an Australian network management service for legal professionals, publishing data it allegedly stole.
BarNet is a specialist communications management firm that caters to legal professionals, providing web hosting, case tracking and notification services and high speed internet, file sharing services and more.
Its case tracking service, BarNet Jade, is a key service for the company, allowing users to look up case details and legislation.
A ransomware group called SafePay listed BarNet on its dark web leak site last week, suggesting it would leak data it had allegedly stolen from the company’s network.
It has since leaked data it claims to be from the company’s network, which appear to be ripped files from individual devices.
Within these are financial statements, contract documents, legal documents, annexure documents, and personal documents such as passport scans, CVs and more.
Most of the data pertains to one individual, with name, birth date, email addresses, phone numbers, passport details, financial banking details, car insurance and registration information, job information and history and much more.
Cyber Daily has reached out to BarNet for more information.
Who is SafePay?
SafePay is a relatively new player in the ransomware game, having first been observed active in October 2024.
The group has been observed targeting businesses in Australia, the United Kingdom, the United States, Italy, New Zealand, Canada, Belgium, Brazil, Germany, Barbados, and Argentina, and, according to the group, is not a ransomware-as-a-service (RaaS) operation.
“SafePay ransomware has never provided and does not provide the RaaS,” it said on its dark web leak site.
The company’s most recent Australian victim, BECKS Group Australia, was listed around the same time as BarNet.
Founded in 1976, BECKS is a jewellery maker that crafts high-quality rings for weddings, gifts and premium wear. It also provides services to jewellers, including alloy supply and CAD design, such as casting, moulding, and refining.
Late last week, the SafePay ransomware gang listed BECKS on its dark web leak site, claiming to have exfiltrated data from the company’s network.
While the threat actor said nothing beyond suggesting it would release the data by Tuesday AEST, BECKS issued a statement regarding the incident, saying it had already contacted customers and stakeholders of the incident.
“As soon as we became aware of the incident, we took immediate steps to contain its impact and escalate the matter to relevant authorities, including the Australian Cyber Security Centre, the Office of the Australian Information Commissioner and South Australia Police,” the company said.
BECKS also wrote that its investigation suggests some data has likely been compromised in the incident.
Be the first to hear the latest developments in the cyber industry.