ASTERO AS
bd_80dd409b665ad003 · schema v1 · pii pii-v1
Full breach record for ASTERO AS →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Meow on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
<p>Dear customers!<\/p><p>We are excited to offer you exclusive access to over 26 GB of confidential data from Astero, a Norwegian company based in Molde, specializing in providing employment and training services. Asteros mission is to support individuals, particularly those at risk of falling out of the workforce, through personalized guidance, career counseling, and work training programs. Their Astero Kurssenter offers courses and certifications aimed at improving skills and reducing workplace risks.<\/p><p>Astero serves both employers and job seekers by offering customized vocational training, apprenticeships, and employment opportunities. Their initiatives focus on job training for individuals with specific needs, fostering workplace inclusion, and enhancing employability through practical courses. In addition to career services, Astero operates divisions in mechanical work and production, supporting local industries and community development.<\/p><p>This comprehensive data pack includes:<\/p><p>Employee data<br>Client information<br>Financial documents, including invoices, credit notes, bank statements, and company credit documents<br>Personal data including dates of birth, employment contracts, passport and drivers license scans<br>Agreements and certificates<br>Addresses<br>Insurance and tax documents company insurance policies, termination notices, and annual tax reports<br>Medical documents and reports medical diagnoses and certificates<br>And much more<br>These records provide valuable insights into Asteros operations and may be of significant interest to business analysts, employment services professionals, and other stakeholders.<\/p><p>To gain access to this exclusive 26 GB data pack, simply click the Buy button and provide your contact details for registration. Our team will promptly reach out to ensure a secure and confidential transaction.<\/p><p>Don
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Oct 14, 2024
Claim posted
—
No filing yet · watching
Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.
Claim → filing
—
Compliance clock
Not assessable
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
No regulatory filing corroborates this yet — it is the attacker's own assertion. Watch this entity to be notified the moment a filing corroborates or contradicts it.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
meow
According to ransomware.live, Meow emerged in 2022 (resurfacing aggressively in 2024), initially operating as a RaaS using the Conti v2 codebase before transitioning to a data-extortion-only model — selling stolen data rather than encrypting files — with a heavy focus on US healthcare and medical research organizations.