Sarcoma Ransomware Group Claims Cyberattack on Manchester Credit Union

A ransomware group known as Sarcoma has taken responsibility for a cyberattack that targeted the Manchester Credit Union (MCU) in the UK. The credit union reported experiencing technical issues with its payment system earlier this month, characterizing the incident as a ‘failed ransomware attack.’ Notably, MCU has stated that no customer data was compromised during the event. MCU’s statement confirmed the incident amid concerns over cyber threats to financial institutions.

Despite not receiving a ransom demand, Sarcoma has listed the credit union on its leak site and has threatened to auction any stolen data unless a ransom is paid. The attack reportedly resulted in the wiping of some servers, leading to a two-day downtime for 21 employees and complicating forensic investigations.

Founded in 1991, Manchester Credit Union serves over 32,000 members in the region. As a crucial financial resource for its community, the implications of such cyber vulnerabilities are significant, underscoring the need for robust cybersecurity measures.

Rebecca Moody, Head of Data Research at Comparitech, commented on Sarcoma’s emergence as a ransomware threat, citing that the group has been linked to 14 confirmed ransomware attacks globally, primarily targeting financial institutions. Moody further noted that there are several unconfirmed claims linked to Sarcoma, reflecting the rising trend of cyberattacks on financial companies.