ZooTampa, one of the most popular zoos in the U.S., has fallen victim to a cyberattack resulting in the theft of employee and vendor information.
An offshoot of the notorious Royal ransomware gang, known as BlackSuit, has claimed responsibility for the attack. ZooTampa responded swiftly by engaging third-party forensic specialists and collaborating with federal law enforcement. The zoo has notified potentially affected individuals and clarified that it does not store personal or financial information of daily visitors or members.
The emergence of the BlackSuit gang, which first appeared in May, raises concerns due to its alleged connections to the Royal and Conti ransomware groups. These experienced operators have previously carried out headline-grabbing attacks, such as the one on the city of Dallas.
Although the spokesperson did not confirm whether the attack involved ransomware, the claim made by the BlackSuit gang suggests potential extortion attempts. Recorded Future ransomware expert Allan Liska anticipates that more victims may be revealed in the future as the group continues its activities and posts victim data on extortion sites.
With the zoo being a nonprofit organization and a designated center for Florida wildlife conservation and biodiversity, the cyberattack highlights the evolving nature of ransomware threats and their potential impact on critical institutions.
The cybersecurity community remains vigilant in monitoring the activities of ransomware groups like BlackSuit, which leverage their experience to carry out attacks against vulnerable targets.