Sedgwick discloses data breach after TridentLocker ransomware attack
嗯,用户让我用中文总结一下这篇文章,控制在100字以内,而且不需要特定的开头。首先,我需要通读文章,抓住主要内容。 文章讲的是Sedgwick公司遭遇了TridentLocker勒索软件攻击,导致数据泄露。Sedgwick是全球领先的索赔管理和风险管理服务提供商,员工数量和年收入都很大。这次攻击影响了他们的联邦承包商部门,泄露了3.4GB的数据。 公司已经启动了应急响应,并聘请了外部专家协助调查。他们强调受影响的部门与其他业务是隔离的,没有影响到更广泛的系统。此外,他们通知了执法部门和受影响的客户,并且没有证据显示索赔管理服务器被访问。 TridentLocker是一个勒索软件即服务(RaaS)组织,使用双重勒索策略,主要针对北美、欧洲等地的多个行业。 现在需要把这些信息浓缩到100字以内。重点包括:Sedgwick遭遇TridentLocker攻击,泄露3.4GB数据;公司启动应急响应;受影响部门与其他业务隔离;TridentLocker的特点和目标。 可能的结构:Sedgwick遭遇TridentLocker攻击,泄露数据;公司启动响应并隔离受影响部门;TridentLocker的特点。 确保语言简洁明了,不使用复杂的术语。 </think> Sedgwick遭遇TridentLocker勒索软件攻击,导致3.4GB数据泄露。该公司迅速启动应急响应机制,并聘请外部专家协助调查。受影响的联邦承包商部门与其他业务隔离,未波及更广泛的系统或客户数据。TridentLocker以双重勒索手段为目标机构实施攻击。 2026-1-5 06:50:3 Author: securityaffairs.com(查看原文) 阅读量:12 收藏

Sedgwick discloses data breach after TridentLocker ransomware attack

Sedgwick confirmed a cyber incident at its federal contractor unit after TridentLocker claimed to steal 3.4GB of data.

Sedgwick is a leading global claims management and risk services provider operating in the insurance and risk solutions sector. It employs roughly 33,000 people worldwide, across more than 80 countries.

Estimated annual revenue is in the multi-billion dollar range: sources suggest around $4–5 billion per year.

Sedgwick confirmed a cybersecurity incident affecting its federal contractor subsidiary, Sedgwick Government Solutions, after the TridentLocker ransomware group claimed to have stolen 3.4GB of data on New Year’s Eve.

The company handles claims and risk management for U.S. federal agencies, including DHS, ICE, CBP, USCIS, DOL, and CISA.

Sedgwick responded to the incident by immediately activating its incident response protocols with the support of external cybersecurity experts. The company is investigating the scope of the incident. The company emphasized that Sedgwick Government Solutions is segmented from other Sedgwick operations, ensuring that no broader systems or data were impacted.

“Following the detection of the incident, we initiated our incident response protocols and engaged external cybersecurity experts through outside counsel to assist with our investigation of the affected isolated file transfer system,” a company spokesperson told The Record Media. “Importantly, Sedgwick Government Solutions is segmented from the rest of our business, and no wider Sedgwick systems or data were affected. Further, there is no evidence of access to claims management servers nor any impact on Sedgwick Government Solutions ability to continue serving its clients.”

The company notified law enforcement and is notifying impacted customers. Additionally, Sedgwick added that there is no evidence of access to claims management servers, and the subsidiary’s ability to continue serving clients remains unaffected.

TridentLocker is a ransomware-as-a-service (RaaS) operation that emerged in late November 2025. The group uses standard double-extortion tactics: encrypting systems and threatening to release exfiltrated data if ransoms aren’t paid. It focuses on diverse sectors including manufacturing, government, IT, and professional services, primarily targeting North America and Europe, but also China and the UK.

The Tor leak site lists 12 confirmed victims since the beginning of the operation on November 11, 2025.

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, ransomware)




文章来源: https://securityaffairs.com/186525/data-breach/sedgwick-discloses-data-breach-after-tridentlocker-ransomware-attack.html
如有侵权请联系:admin#unsafe.sh