Kurla advertising firm hit by ransomware attack in Mumbai, hackers demand Rs 4.25 lakh in Bitcoin

Representation pic

An advertising firm in Kurla allegedly fell victim to a significant cyber attack, in which unidentified hackers breached the company's server, encrypted all its data, and demanded a ransom of Rs 4.25 lakh in Bitcoin for its restoration.

The incident began earlier this month when employees faced sudden login issues across internal systems. Efforts to reset credentials failed, and it became clear that the company's entire data repository had been wiped clean.

The breach came to light when cybersecurity experts discovered a Word document planted on the company's compromised server, revealing that the firm's Network Attached Storage (NAS) had been infiltrated and critical data had been stolen.

The document included a link for data restoration that was accessible only after the ransom payment, and carried a warning message that said, "We are professionals. Pay once in Bitcoin or lose everything. Cooperate, and we'll also help secure your systems."

The attackers also requested proof of payment via a specific email address. The company filed a complaint with Mumbai Police's Cyber Cell. This attack adds to a growing wave of cyber incidents reported nationwide after the Pahalgam attack, with over 10 lakh cases reportedly logged.

"The Civil Defence Department has urged firms to maintain regular data backups and enhance digital safeguards, as the need for stronger cybersecurity is needed especially for businesses," said an official from cyber police.