Quick Takeaways
- Coinbase Cartel employs data-theft extortion without encryption, targeting sectors like healthcare and transportation, with claimed victims rising rapidly in 2026.
- Tower Insurance is under investigation after being listed on a leak site; no confirmed data breach has yet been disclosed, but the incident highlights risks for dual-listed companies.
- The group’s strategy leverages quick data exfiltration and public leak postings, exploiting the inability of backups to prevent data publication, increasing privacy and liability risks.
Threat Details, Attack Techniques, and Targets
A ransomware group, called Coinbase Cartel, claims to have stolen data from Tower Limited, a New Zealand insurer. The group first appeared in September 2025 and has since claimed at least 207 victims by September 2026. Coinbase Cartel does not use encryption to lock systems; instead, it steals data and threatens to publish it. The group operates by exfiltrating data and listing it on leak sites. Its main targets are sectors with sensitive data, such as healthcare, technology, and transportation. They focus mainly on Western targets, especially in the US, France, UAE, Germany, and Brazil. The group is part of a larger collective called Scattered Lapsus$ Hunters and its activities are described as opportunistic with high-volume victim claims.
Impact, Security Implications, and Remediation Guidance
Currently, Tower has not confirmed that any customer data has been compromised. The company is investigating the claim with outside cybersecurity experts and has notified authorities. Because the incident remains unverified, Tower has not disclosed any breach with the NZX or ASX markets yet. The main impact lies in potential reputational damage and the risk of increased insurance claims due to data theft. Insurers and policyholders should stay alert. It is advised that affected individuals monitor their accounts and be cautious of phishing messages. For remediation, organizations should consult with their cybersecurity vendors or authorities. As the situation develops, they should follow official guidance to protect sensitive data and ensure compliance with disclosure laws.
Discover More Technology Insights
Stay informed on the revolutionary breakthroughs in Quantum Computing research.
Stay inspired by the vast knowledge available on Wikipedia.
ThreatIntel-V1
