Amcor Responds to Ransomware Claims from CoinbaseCartel
The Situation Unfolds
Amcor, the global packaging giant that traces its roots back to Melbourne in the late 1800s, has recently found itself in the sights of the hacking group CoinbaseCartel. On November 25, CoinbaseCartel listed Amcor as a victim on its darknet leak site, stirring concerns in the industry about the potential ramifications of such a cyber breach.
While the hackers did not provide extensive details about the situation—such as the amount of data exfiltrated or their ransom demands—merely being named as a victim raises alarm bells for a company of Amcor’s stature.
Amcor’s Official Position
In light of the claims made by the CoinbaseCartel, Amcor has issued a statement to address the situation. A spokesperson confirmed their awareness of the hacker group’s assertions, emphasizing that the company has established cybersecurity protocols to manage and mitigate risks.
“We are aware of these claims regarding Amcor,” said the spokesperson. “Amcor has well-established cybersecurity protocols, and we have initiated additional security checks with the assistance of external forensic support.” This proactive approach aims to protect not just the company’s IT infrastructure, but also the interests of customers, partners, and employees.
Assurance of Control
Amcor remains confident in its ability to manage the current threat. “We confirm that we remain in control of our IT infrastructure, and we are operating normally,” the spokesperson asserted. The importance of maintaining operational integrity during such incidents cannot be understated, and Amcor’s commitment to vigilance highlights their dedication to cybersecurity.
Who is CoinbaseCartel?
CoinbaseCartel brands itself as a financial-driven hacking group that aims for data acquisition without deploying traditional ransomware tactics like system encryption or operational disruptions. Instead, they focus on data exfiltration and view their operations as entirely opportunistic. According to their statements, their attacks often target organizations that possess weak points in their data repositories.
Interestingly, the group is not just content to work alone; they are actively recruiting individuals and entities that can provide them with authorized access to corporate systems, focusing on strategic partnerships. CoinbaseCartel indicates that these collaborations could have various compensation structures, including fixed-rate agreements or revenue-sharing models based on the value of the partnership.
A Recent Player in the Cybersecurity Scene
Emerging in mid-September, CoinbaseCartel has quickly claimed 41 victims, making it a significant new player in the world of cybercrime. One of their initial targets was associated with the Japanese IT company NTT Data, showcasing the group’s penchant for targeting firms that may have vulnerabilities worth exploiting.
The History and Scale of Amcor
Amcor, which maintains its headquarters in Zurich today, exemplifies global reach with operations in over 210 locations across more than 30 countries. The company’s workforce exceeds 75,000 employees, which solidifies its position as a substantial player in packaging solutions worldwide. While its origins are rooted in Australia, Amcor’s current standing reflects its evolution into a multinational corporation.
Navigating Cybersecurity Challenges Ahead
As cyber threats continue to evolve, companies like Amcor face the challenge of not only safeguarding their data but also ensuring the trust of their partners and clients. The ongoing situation with CoinbaseCartel serves as a reminder of the vulnerabilities present in today’s digital landscape and the necessity for robust cybersecurity measures.
Amcor’s proactive stance in addressing these claims is crucial, both for navigating the current situation and for reinforcing their commitment to cybersecurity for the future.


