December 5, 2023 at 12:07PM
Tipalti is probing allegations that the ALPHV ransomware group hacked its network and took 256GB of data, affecting clients like Roblox and Twitch. Tipalti is working with Roblox on the issue, and there is no known impact yet. The incident was first claimed by ALPHV in a deleted post.
Meeting Takeaways:
1. Tipalti, a provider of technology solutions for various services, is reported to be investigating a security breach by the ALPHV ransomware gang, which claims to have stolen 256 GB of data, including information from Roblox and Twitch.
2. Tipalti has made a public statement to BleepingComputer, affirming their commitment to data security, and confirming that they have robust protocols in place. They are actively looking into the claims made by the cybercriminal group.
3. Roblox has been in contact with Tipalti to look into the ransomware gang’s claims but reports no known impact on their systems and has not been approached by the responsible party for the security incident.
4. BleepingComputer is opening a confidential line of communication via Signal and email for tips or information related to the incident.
5. The ALPHV ransomware gang, also known as BlackCat, alleges to have been inside Tipalti’s systems since September 8th, 2023, without detection, and claims to have extracted over 265 GB of data. They intend to extortion Tipalti’s customers separately.
6. ALPHV has published a post claiming that Tipalti’s cyber insurance doesn’t cover extortion and that they do not expect the company to pay the ransom. The gang also indicates it plans to extort Tipalti’s customers directly.
7. As of now, the specific customers affected by the data theft are not disclosed, apart from mentions of Twitch and Roblox.
8. Twitch was contacted by BleepingComputer but has not provided any response regarding the incident.