The Yellow Pages Canada directory would be the victim of a cyberattack claimed by the Black Basta ransomware gang. Copies of passports, RAMQ cards, account statements and driver’s licenses: La Presse found samples of stolen confidential information on the dark web, including from Quebecers.
This alleged cyberattack follows a classic modus operandi, meaning that the gang unveiled online, on its blog located on the dark web, samples of the stolen data to put pressure on the targeted company.
In this case, it is the Yellow Pages, this directory that brings together the information of thousands of Canadian businesses and consumers.
The extent of the information leak is not known.
At the time these lines were published, the Yellow Pages had not responded to the request emailed by La Presse. In the morning of Saturday, a call to the Yellow Pages customer service number indicates that “the communication could not be established”. The general company number hangs up automatically.
In early April, the Yellow Pages and Canada 411 websites were down for a few days, La Presse noted.
On the dark web, Black Basta published samples of very sensitive information on several people, including Quebecers. It includes copies of Canadian passports, Quebec and British Columbia driver’s licenses, Régie de l’assurance maladie du Québec (RAMQ) cards, and a tax return containing the number individual’s social insurance.
Statements of accounts for several companies, and the sales contract of an Ontario company are also disclosed.
On Friday evening, the cyberattack monitoring group BetterCyber ​​alerted on Twitter to this attack claimed by Black Basta.
«
Although directly challenged on Twitter, Yellow Pages (the Yellow Pages) had not responded publicly on the social network in the morning of Saturday.
Black Basta is an active ransomware gang. On April 20, London-based business services giant Capita confirmed it had been the victim of a cyberattack by them, according to Bleeping Computer. About 4% of Capita’s server infrastructure was reportedly affected.
It was also Black Basta who, in November 2022, attacked the Empire group, which notably operates IGA supermarkets.
