Black Basta claims responsibility for a cyberattack against Yellow Pages Group

Last week, the Black Basta ransomware gang claimed responsibility for a cyberattack against the Yellow Pages Group, a Canadian directory publisher and posted a sample of sensitive documents and data. The posted sample included the following documents:

• ID documents (such as scans of passports and driver’s licenses) exposing people’s date of birth and address.
• Tax documents—exposing Social Insurance Number (SIN)
• Sales and purchase agreements
• ‘Accounts Receivable’ spreadsheet dated February 28, 2023
• Budget and debt forecast dated December 2022

The Yellow Pages Group has confirmed the cyberattack against them and is conducting a thorough investigation with the assistance of external cyber security experts to contain the incident and secure their systems. The Yellow Pages Group also stated that based on their investigation, it is believed that the threat actors stole certain personal information from servers containing employee data and limited data relating to business customers.