Boyce Technologies (device manufacturer- transit communication systems and now ventilators b/c of COVID-19) Listed by doppelpaymer Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On August 1, 2020, Boyce Technologies appeared on a leak site operated by the DoppelPaymer ransomware group. The listing states that internal files were taken during a ransomware attack, though the number of people affected and the precise contents of the material remain undisclosed in public reporting. The incident is one of many ransomware operations reported that year in which threat actors published victim names after encrypting systems and removing data. Its relevance stems from the company’s role in manufacturing communication equipment for transit systems and, during the early months of the COVID-19 pandemic, ventilator components.

Inside the incident

Boyce Technologies was listed on the DoppelPaymer ransomware leak site on August 1, 2020. The group claims to have stolen internal data. No further details on the date of the intrusion, the method of initial access, the volume of data taken, or any ransom demand have been made public. The number of individuals whose information may be involved is also unknown.

The group behind it: doppelpaymer

DoppelPaymer is a ransomware operation that emerged in 2019 and became known for encrypting files on targeted networks and copying data before deployment. The group has listed numerous organizations on its leak site when negotiations failed, a tactic sometimes called double extortion. Public reporting has associated the group with attacks on companies in manufacturing, healthcare, and government contracting sectors, though specific claims about any single victim require independent verification.

About Boyce Technologies (device manufacturer- transit communication systems and now ventilators b/c of COVID-19)

Boyce Technologies designs and produces communication and control systems used in public transit infrastructure. In 2020 the company expanded production to include components for medical ventilators in response to pandemic-related demand. Organizations of this type routinely maintain records on employees, suppliers, customers, and proprietary engineering information, as well as regulatory and safety documentation required in both transportation and medical-device sectors.

What was likely exposed

The only information released states that internal files were exfiltrated. The exact categories of data have not been disclosed. Manufacturers in this sector commonly store employee records, contract details, design specifications, and communications with transit agencies or healthcare customers. Without a confirmed inventory, it is not possible to determine whether any particular type of record was taken.

Why it matters

Exposure of internal files can create operational and competitive concerns for the affected organization and may place individuals named in those files at risk of follow-on fraud or targeted scams. For a company producing equipment used in public infrastructure and medical devices, any compromise of design or safety-related records carries additional implications for regulatory compliance and supply-chain partners, even when the full scope of the material remains unknown.

If your data was in this claimed breach

Monitor accounts for unusual activity and consider placing fraud alerts with credit-reporting agencies. Use unique passwords and enable multi-factor authentication on any services that may hold related information. Individuals can run a free exposure scan of their email address against known breach data sets to check whether their information appears in other publicly reported incidents.

AICompiled with AI assistance from public sources and published under our editorial standards.