Disruption to Intrado telecom provider claimed by Royal ransomware gang

On Tuesday 27^th of December 2022, the Royal Ransomware gang claimed responsibility for a cyber attack against telecommunications company Intrado. At this current time, Intrado is yet to share any information regarding this incident. However, it is believed that the attack started on Thursday 1^st of December 2022. The date of the initial breach coincides with a widespread outage that impacted all Intrado’s services.

“We are experiencing an issue with our internal network, Products are not impacted at this time. However, this may impact your ability to reach us via phone,” Intrado said in an incident report on December 1st.

The threat actor has claimed to have obtained internal documents, passports, and employee driver’s licenses from compromised Intrado devices. Although the ransomware gang has not yet leaked any of the files allegedly exfiltrated from Intrado’s network, they did share a 52.8 MB archive containing scans of passports, business documents, and driver’s licenses as proof of the breach.