- RansomHub claims intrusion into what appears to be MetLife's Latin American division
- Group leaks MetLife documents to corroborate claim
- However, MetLife says the intrusion belongs to a company owned by a subsidiary.
The infamous ransomware group RansomHub claims it breached insurance giant MetLife's Latin American division on New Year's Eve, but the company itself denies any incident.
RansomHub provided receipts on its home page in the form of company documents written in Spanish, but a MetLife spokesperson said in a statement to Cybernews that “there are no incidents that we are aware of that impact MetLife's Latin American division.”
The same representative did acknowledge an incident involving Fondo Génesis, a financial services firm that operates solely in Ecuador and is owned by a subsidiary of MetLife.
MetLife vs RansomHub
“Fondo Génesis operates separately from MetLife's business systems. Therefore, the impact of this incident is limited to Genesis Fund only,” they said.
If you're curious, the leaked confidential files, according to Cybernews, include Treasury and “crisis” committee minutes, lists of company IP addresses, and executive documents dating back to last July.
RansomHub is a fairly new name in ransomware, with its first known victim dating back to February 2024, but last year it became the top provider for the sheer number of ransomware victims claimed, with a fifth of all known attacks attributed to them.