Targetcom Listed by avaddon Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

On September 9, 2021, the ransomware group avaddon listed Targetcom on its data-leak site. The group stated that it had obtained internal files from the organization during a ransomware operation. The number of individuals potentially affected remains unknown, and no further confirmation of the data's contents or volume has been made public. This listing raises questions for any organization that stores operational records, as the exposure of internal material can extend beyond the immediate victim to partners or individuals referenced in those files.

Inside the incident

Public reporting on the event is limited to the appearance of Targetcom on the avaddon leak site. The group claims to have stolen internal data, but no independent verification of the exfiltration or the attack method has been released. The date the data was allegedly taken, the duration of any intrusion, and whether encryption was also deployed are not disclosed in available records.

The group behind it: avaddon

Avaddon operated as a ransomware group that used encryption alongside data theft to pressure victims. Its approach typically involved publishing samples or lists of stolen material on a dedicated site when ransom demands were not met. The group was active in 2020 and 2021, targeting organizations across multiple sectors and releasing files to increase leverage. Its listing of Targetcom constitutes a claim by the group rather than a confirmed event.

Who is Targetcom?

Targetcom is identified in the incident record simply as the listed organization. No public details describe its size, sector, or specific activities. Organizations of this type routinely maintain internal files that can include operational records, communications, and administrative documents necessary to their functions.

The information in question

The only data type named in connection with the listing is internal files said to have been exfiltrated. The precise categories of information contained in those files have not been disclosed. Without additional confirmation, the exact nature of any personal or sensitive records remains unverified.

The real-world impact

Exposure of internal files can create secondary risks for individuals whose details appear in operational documents, such as contact information or transaction records. For the organization, the incident may lead to review of access controls and incident response procedures. Because the scale of the data and the number of people involved are unknown, the full extent of potential follow-on effects cannot be quantified from current information.

What to do if you're exposed

Individuals concerned about possible involvement can review account statements and credit reports for unusual activity. Enabling multi-factor authentication on important services and using unique passwords reduce the chance that any exposed credentials can be reused. A free exposure scan of an email address against known breach data provides one way to check for prior appearances in public records of incidents.

AICompiled with AI assistance from public sources and published under our editorial standards.