Vice Society, the cybercriminal gang responsible for the attack, is believed to have used internal login credentials leaked on the dark web to access LAUSD’s network and launch the ransomware attack. Twenty-threehttps://www.databreachtoday.com/la-school-district-accounts-on-dark-web-before-attack-a-20008 on the dark web leading up to the attack, with at least one set granting access to LAUSD’s Virtual Private Network (VPN).
On September 3, 2022, the https://www.upguard.com/security-report/los-angeles-unified-school-district (LAUSD) fell victim to a ransomware attack launched by a Russian-speaking ransomware gang known as VIce Society.
Vice Society revealing to cybersecurity reporter Jeremy Kirk that they were responsible for the LAUSD ransomware attack to cybersecurity reporter Jeremy Kirk.
LAUSD, rightfullyhttps://www.fbi.gov/how-we-can-help-you/safety-resources/scams-and-safety/common-scams-and-crimes/ransomwareadvice, denied the ransom payment, resulting in Vice Society publishing the stolen data on their ransomware leak blog hosted on the dark web.