CSIDB logo
Incident

RentoMojo

Incident posture

Attack window
Jun 2022
Location
India
Status
Historical
CIA posture
Available to members
Updated
2025-12-25 00:00

Linked entities

Victim
RentoMojo
Threat actors
0 actors
Sources
1 source

Timeline

Occurred
Jun 2022
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

A ransomware attack targeted a leading advertising firm, compromising 22 computers and affecting over 1,500GB of data. The incident, suspected to involve RRCC ransomware, resulted in significant data loss within the organization's office systems. Cybersecurity experts highlighted the event to emphasize operational vulnerabilities without referencing specific mitigation measures. The breach underscored risks associated with inadequate digital security practices in corporate environments.

Motives

Detailed motive labels are available to members.

3 motives

TTPs

Detailed technique labels are available to members.

1 technique

Description

On June 3, 2022, a ransomware attack compromised the systems of a leading advertising firm based in Kolkata. The incident affected 22 office computers, resulting in the compromise of over 1,500GB of company files. Cybersecurity experts attributed the attack to a suspected RRCC ransomware variant, which encrypted or otherwise restricted access to critical business data. The breach occurred during regular business operations, though the exact initial intrusion vector remained unspecified in available reports. The scale of data loss significantly disrupted normal workflows, though the firm’s public communications did not detail specific operational interruptions.

The attack prompted immediate attention from cybersecurity professionals, who later emphasized the need for organizational safeguards against similar incidents. While the advertising firm did not publicly disclose its internal response measures, experts cited the event to highlight common vulnerabilities exploited by ransomware operators. No customer data exposure or financial demands were explicitly mentioned in initial reports. The incident underscored the operational risks posed by ransomware to regional businesses, particularly those handling large volumes of digital assets. Forensic analysis of the attack timeline or data recovery efforts was not detailed in available sources.

Sources

Sources available to members: 1 source.

CSIDB