The Rhysida ransomware group says it’s behind the highly disruptive October cyberattack on the British Library, leaking a snippet of stolen data in the process.
A low-res image shared to its leak site appears to show a handful of passport scans, along with other documents, some of which display the format of HMRC employment documents.
Rhysida started an auction for the stolen data with a deadline for bids ending just before 0800 UTC on November 27. The criminals said there will be only one single-party winner that will be the sole recipient of the stolen data. The starting bid has been set at 20 Bitcoin – roughly $745,000.