DisclosureLens
GLOBALMalwareProfessional ServicesProfessional ServicesRansomwareCicada3301Ransom DemandedActor NamedMedium

Capital Printing

bd_bb05d5d899087eaf · schema v1 · pii pii-v1

Severity

Medium

Discovered

Filed

Sep 20, 2024

To disclose

Affected

Not disclosed

Confidence

50%
Full breach record for Capital Printing

Threat-actor claim — not a regulatory filing

This row is a claim by the ransomware group Cicada3301 on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.

Group activity: Business ServicesDiscovered: 2024-09-20

Source: Ransomware.live

Post text · scraped from the leak site

If the company does not contact us by 09.22.24 18:00 UTC, the data will be published! Capital Printing offer expertise in conceptualizing, engineering and manufacturing your unique packaging projects. "Thirty years ago, Nolan Russo founded Capital Printing with the commitment to always honor and respect those who trusted him with their work." (c) www.capitalprintingcorp.com We stolen 5 TB of data, clients, work projects, accounting, banking documents, HR. The data will be published if the company refuses to cooperate and protect the private documents and interests of its clients and employees. We want to make sure that Capital Printing corp really lives up to its claims, respects its clients and values ​​its 30-year business !!! The company decided to receive money from the insurance company in order to steal it, ignoring its employees and clients (proof in screenshots) !!! And this means their time is coming to an end... If the company does not contact us by 09.22.24 18:00 UTC, the data will be published!

Incident timeline — mostly unverified

? — ?

Breach window unknown

Sep 20, 2024

Claim posted

No filing yet · watching

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Claim → filing

Compliance clock

Not assessable

Tracked as a single-filing incident — the only disclosure on record for this event so far.Unverified claimView incident

Evidence ladder

Leak-site claimThis record

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

No regulatory filing corroborates this yet — it is the attacker's own assertion. Watch this entity to be notified the moment a filing corroborates or contradicts it.

Source ceiling

  • actor name
  • victim claim
  • ransom/leak status
  • discovery date
  • materiality
  • notification
  • affected count
  • confirmed data types
  • compliance clock

The ✕ fields stay blank until a regulatory filing or victim disclosure lands.

About this groupFirst seen 2024-06-04

cicada3301

According to ransomware.live, Cicada3301 is a ransomware-as-a-service group (tracked as Repellent Scorpius by Palo Alto) that emerged in mid-2024 using Rust-based ransomware targeting Windows, Linux, and ESXi systems, suspected to be a successor of BlackCat/ALPHV and running an affiliate program with 20% commissions.

75 victims claimed globally75 tracked hereFull profile →