Ransomware group interlock hits K&A Industries

K&A Industries is a "secure identity architecture" company that manages the entire authentication lifecycle for government and enterprise clients. As a result, their own security weaknesses led to the compromise of sensitive personal data, biometric templates, and government contract data. K&A also provides PIV credentials to government agencies, such as the Los Alamos National Laboratory, which involves processing the personal data of federal employees. A breach of this data would trigger a cascade of legal, financial, and operational crises, leading to breach notification obligations under GDPR/government regulations, multimillion-dollar fines and class action lawsuits, loss of government contracts/CMMC status, and physical data breaches using cloned credentials at client sites.

Posted by the interlock threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.