Files from Port Adelaide’s internal IT system posted online by ransomware group

A ransomware group with links to Russia that claimed it hacked Port Adelaide says it’s now posted online files taken from the club.

The ransomware group with links to Russia that claimed to hack Port Adelaide’s internal IT system has published files online it says are from the Power.

The Power was last month on the end of a cyber attack from Cuba Ransomware, who claimed it had hacked Port Adelaide’s website and has accessed a range of files including “financial documents”, “correspondence with bank employees”, “account movements”, “balance sheets” and “tax documents”.

The club said it was investigating the claims but members should not be concerned with their personal information on an external server.

On Friday the Power released a statement saying it was “now aware that the party which claimed to have obtained some data from our internal IT environment has published files online”.

Port Adelaide is investigating the claims by Cuba Ransomware.

“This third party is claiming that these published documents were obtained as part of any unauthorised access,” the club said.

“Port Adelaide is working with cyber security experts to determine exactly what these files contain as swiftly as possible.

“However, at this stage there is no sign of any personal information being accessed and the club can confirm again that membership data is hosted on an external, separate system to our internal IT network.

“Port Adelaide will directly contact anyone deemed to be at risk from any disclosure to provide advice and steps to protect themselves from data misuse.

“Several additional security measures have been implemented to our systems, and the club wishes to reiterate our recommendation to all our members to remain vigilant against the potential risk of receiving phishing or other scam communications from any parties claiming to be from Port Adelaide Football Club.”

Cybersecurity analysts and trackers online have said the data Cuba Ransomware has leaked from the Power is mostly general operations information with a small amount of member details.

This includes Microsoft accounts and Kaseya logins.

The Power said it would provide more information on the investigation as it progresses.