{"id":37597,"date":"2020-10-09T17:40:09","date_gmt":"2020-10-09T17:40:09","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files\/"},"modified":"2020-10-09T17:40:09","modified_gmt":"2020-10-09T17:40:09","slug":"software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files\/","title":{"rendered":"Software AG hit with ransomware: Crooks leak staffers&#8217; passports, want millions for stolen files"},"content":{"rendered":"<p>Software AG has seemingly been hit by ransomware, with the German IT giant itself telling the Euro nation&#8217;s stock market it had been \u201caffected by a malware attack.\u201d<\/p>\n<p>In a <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"http:\/\/otp.investis.com\/generic\/dgap-story.aspx?cid=2167&amp;newsid=13974&amp;culture=en-US\">notification<\/a> to the German stock market published earlier this week, Software AG said: \u201cThe IT infrastructure of Software AG is affected by a malware attack since the evening of 3 October 2020.\u201d<\/p>\n<p>News of the \u201cmalware attack\u201d has been slow to filter into the Anglosphere, though the German Press Agency newswire published a brief note that was syndicated on obscure investment websites <a target=\"_blank\" href=\"https:\/\/translate.google.com\/translate?sl=auto&amp;tl=en&amp;u=https%3A%2F%2Fwww.4investors.de%2Fnachrichten%2Fboerse.php%3Fsektion%3Dstock%26ID%3D146616\" rel=\"noopener noreferrer\">yesterday evening<\/a>. That report states \u201cdata from Software AG servers and employees&#8217; notebooks were downloaded.\u201d<\/p>\n<p>&#8220;While services to its customers, including its cloud-based services, remain unaffected, as a result, Software AG has shut down the internal systems in a controlled manner in accordance with the company&#8217;s internal security regulations,&#8221; the firm\u2019s note to the stock market continued.<\/p>\n<p>&#8220;The company is in the process of restoring its systems and data in order to resume orderly operation. However, helpdesk services and internal communication at Software AG are currently still being affected.&#8221;<\/p>\n<p>It added: \u201cSoftware AG is not aware of any customer information being accessed by the malware attack.\u201d<\/p>\n<p><i>The Register<\/i> has asked Software AG for comment. At the time of writing the company\u2019s homepage refers visitors to \u201cimportant customer information,\u201d but only \u2018fesses up to \u201ctechnical issues with our online support system,\u201d albeit with a link to the stock market note.<\/p>\n<p>At least one customer seemed unaware of what was going on:<\/p>\n<blockquote class=\"twitter-tweet\" readability=\"6.0714285714286\">\n<p lang=\"en\" dir=\"ltr\"><a href=\"https:\/\/twitter.com\/SoftwareAG?ref_src=twsrc%5Etfw\">@SoftwareAG<\/a> Is there an issue with your documentation website? I have been unable to access it for a few days, the response is &#8216;connection timed out&#8217;<\/p>\n<p>\u2014 Graham Rainbow (@zippygwr) <a href=\"https:\/\/twitter.com\/zippygwr\/status\/1314531947423694849?ref_src=twsrc%5Etfw\">October 9, 2020<\/a><\/p><\/blockquote>\n<p>Screenshots of the attackers\u2019 ransom webpage, seen by <i>El Reg<\/i>, show scans of staffers\u2019 passports, internal billing notes, and what appears to be internal directories on a Windows-based system. Folder names suggest the contents could relate to Software AG customers in the US and Canada.<\/p>\n<p>Brett Callow, a threat analyst with ransomware specialist firm Emsisoft, told <i>The Register<\/i> that the Clop ransomware variant, thought to have been used in this attack, is relatively new.<\/p>\n<div class=\"promo_article\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/regmedia.co.uk\/2016\/07\/06\/shutterstock_drip_hospital.jpg?x=174&amp;y=115&amp;crop=1\" width=\"174\" height=\"115\" alt=\"Nurse erects drip behind privacy curtain at hospital bed. Photo by Shutterstock\"><\/p>\n<h2 title=\"Same mob promised not to target healthcare facilities\">Doppelpaymer ransomware crew fingered for attack on German hospital that caused death of a patient<\/h2>\n<p><a href=\"https:\/\/www.theregister.com\/2020\/09\/23\/doppelpaymer_german_hospital_ransomware\/\"><span>READ MORE<\/span><\/a><\/div>\n<p>&#8220;Clop is a variant of CryptoMix and may be used by the group behind the Dridex banking trojan. Like REvil and NetWalker, it is primarily used to target enterprise networks, with known past victims including Prominent and ExecuPharm. Clop\u2019s demands can run to the millions.\u201d<\/p>\n<p>Speaking in general about the murky world of ransomware, Callow added: \u201cIn 2018, the average ransom demand was $5k USD with most victims being small businesses. Today, the average demand is somewhere between $150k and $250k, with multi-million dollar demands increasingly the norm and victims including multinationals. governments and hospitals. As a result, the criminals are better resourced and more motivated than ever.\u201d<\/p>\n<p>Echoing an increasingly common demand, he concluded: \u201cAs we\u2019ve said before, the only way to stop this escalation and to put a spoke in the wheel of this multi-billion industry, is to prohibit the payment of demands. If the revenue stream dries up, the attacks will dry up.\u201d<\/p>\n<p>We understand the ransom demand against Software AG runs into millions of dollars and will update this article if the company gives any more details. \u00ae<\/p>\n<p> READ MORE <a href=\"https:\/\/go.theregister.com\/feed\/www.theregister.com\/2020\/10\/09\/software_ag_ransomware\/\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>There&#8217;s only one way to stop this, says counter-ransomware bod Software AG has seemingly been hit by ransomware, with the German IT giant itself telling the Euro nation&#8217;s stock market it had been \u201caffected by a malware attack.\u201d\u2026 READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":37598,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[],"class_list":["post-37597","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-the-register"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Software AG hit with ransomware: Crooks leak staffers&#039; passports, want millions for stolen files 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Software AG hit with ransomware: Crooks leak staffers&#039; passports, want millions for stolen files 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2020-10-09T17:40:09+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/10\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"174\" \/>\n\t<meta property=\"og:image:height\" content=\"115\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Software AG hit with ransomware: Crooks leak staffers&#8217; passports, want millions for stolen files\",\"datePublished\":\"2020-10-09T17:40:09+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files\\\/\"},\"wordCount\":574,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/10\\\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files.jpg\",\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files\\\/\",\"name\":\"Software AG hit with ransomware: Crooks leak staffers' passports, want millions for stolen files 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/10\\\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files.jpg\",\"datePublished\":\"2020-10-09T17:40:09+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/10\\\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2020\\\/10\\\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files.jpg\",\"width\":174,\"height\":115},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Software AG hit with ransomware: Crooks leak staffers&#8217; passports, want millions for stolen files\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Software AG hit with ransomware: Crooks leak staffers' passports, want millions for stolen files 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files\/","og_locale":"en_US","og_type":"article","og_title":"Software AG hit with ransomware: Crooks leak staffers' passports, want millions for stolen files 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2020-10-09T17:40:09+00:00","og_image":[{"width":174,"height":115,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/10\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Software AG hit with ransomware: Crooks leak staffers&#8217; passports, want millions for stolen files","datePublished":"2020-10-09T17:40:09+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files\/"},"wordCount":574,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/10\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files.jpg","articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files\/","url":"https:\/\/www.threatshub.org\/blog\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files\/","name":"Software AG hit with ransomware: Crooks leak staffers' passports, want millions for stolen files 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/10\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files.jpg","datePublished":"2020-10-09T17:40:09+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/10\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2020\/10\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files.jpg","width":174,"height":115},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/software-ag-hit-with-ransomware-crooks-leak-staffers-passports-want-millions-for-stolen-files\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Software AG hit with ransomware: Crooks leak staffers&#8217; passports, want millions for stolen files"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/37597","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=37597"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/37597\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/37598"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=37597"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=37597"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=37597"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}