AlphaV / Blackcat have posted a claim that they have compromised Tipalti – a financial transaction company which operates a payments platform for online services such as GoDaddy, Twitch, Twitter, Canva, Discord, Cazoo, and many more.
Via their online dark web leak site, the gang say that they have been present in Tipalti’s network since September and during that time have exfiltrated over 265GB of data.
The gang have not only played the double-extortion cards of ransom and exfiltration, in a new move they have announced that not only are they wanting payment from Tipalti, but also from their affected clients.
So far on the leak site, the gang say that tomorrow (Monday, 4th December) they are starting to extort not only Tipalti, but Roblox, and Twitch as well.
The gangs message is that they will re-publish the extortion demand just before the financial markets open to maximise the effect against the Roblox share price.
Who are Tipalti?
Tipalti are a UK FinTech company headquartered in London. The company provides a payment platform which sends financial transactions in seconds between accounts. Their primary platform is called AP Automation which is a mass payment automation system and accounts payable software that allows companies to automatically manage, execute and reconcile the entire process of making outbound payments to partners and suppliers.
