Advertisement

We need your help now

Support from readers like you keeps The Journal open.

You are visiting us because we have something you value. Independent, unbiased news that tells the truth. Advertising revenue goes some way to support our mission, but this year it has not been enough.

If you've seen value in our reporting, please contribute what you can, so we can continue to produce accurate and meaningful journalism. For everyone who needs it.

Sasko Lazarov/Photocall Ireland
Injunction

US firm being blackmailed for more than €5m secures injunction in Irish High Court

The company today secured a temporary order against what are believed to be two Polish nationals and an Irish-registered company.

AN AMERICAN COMPANY that claims it is being blackmailed by hackers seeking $6 million has secured an emergency High Court injunction aimed at removing confidential information posted about it on the internet.

Today, Southwire Company LLC secured a temporary order against what are believed to be two Polish nationals and an Irish-registered company that are all allegedly linked to a website publishing confidential information about the US firm.

The company does not say the individuals or the corporate entity named in its proceedings are behind or involved with the cyber-attack.

At the High Court, Jim O’Callaghan SC, appearing with Anthony Thuillier Bl, said his client is based in the US State of Georgia, manufactures cable and wiring and employs thousands of people.

Counsel said that on 9 December, Southwire was the subject of a cyberattack, resulting in many of its computer files being encrypted.

The hackers, whose identities are currently unknown, counsel said, demanded a payment in the online Bitcoin currency equivalent to just over $6 million to decrypt the files.

No ransom payment was made and the company sought expert advice on how to deal with the situation.

The “criminal act” against Southwire is being investigated by the US Federal Bureau of Investigation, counsel said.

It said the attackers became impatient with the refusal to pay the ransom.

Counsel said that in recent days the attackers posted confidential information contained in the company’s files on a website called mazenews.top.

Counsel said that the attackers have also threatened to publish more confidential information taken from Southwire’s files.

Counsel said the company was extremely concerned about this and was seeking orders from the Irish High Court after its investigations revealed that the nine-digit IP address of that website is registered to a company called World Hosting Farm Limited (WHFL).

An Internet Protocol or IP address is a number assigned to each device connected to a computer network that uses the Internet for communication.

A Mr Janusz Dybko, with an address c/o New Mallow Road, Cork is listed as being the contact person in regards to that particular IP address, which is owned by WHFL, counsel said.

WHFL, which counsel said is currently listed as having being dissolved, has a registered addresses at New Mallow Road, Cork, and more recently at Dawson Street in Dublin.

The owner and director of the company is listed as a Mr Artur Grabowski of St. Budzynskiego, Stupsk, Poland, counsel said.

The company’s secretary is listed as a firm called Admiral Tax Limited, with a current registered address at Fairview, Clontarf in Dublin.

Counsel said its previous address was listed as the same address as WHFL’s Cork address.

The company wrote to Mr Grabowski, Mr Janusz Dybko and Admiral Tax asking them to cease and desist from hosting anything displaying the confidential information taken by the hackers.

No reply to those demands were received. As a result, the company sought injunctions against those three parties as well as persons unknown involved in the cyber attacks.

The injunction requires the defendants to remove all data relating to Southwire and its customers from the website mazenews.top.

The order also compels the defendants to hand up all data taken from Southwire, and that no further material is taken from the US firm be published on the internet or anywhere else.

The temporary injunction was granted, on an ex-parte basis, by Ms Justice Mary Rose Gearty.

The judge said she was not prepared to grant the company a temporary order preventing the media from publishing the company’s name in its reporting of the case.

The company had argued that the identification of the company at this stage would aid the blackmailers.

However, the Judge said that the court did not have the jurisdiction to make such an order, given that justice must be administered in public.

This was not a case, the Judge said, where an exception could be made that would allow the court to make that particular order.

The judge, in adjourning the case, made the matter returnable to a date in mid-January.

Author
Aodhan O'Faolain & Ray Managh