{ "id": "9b248bc2-51fd-4160-97e6-8cee80cc3d4b", "created_at": "2026-04-06T01:32:11.757942Z", "updated_at": "2026-04-10T03:20:42.706812Z", "deleted_at": null, "sha1_hash": "0eb953c16c35131b12b675a11d1065556241242b", "title": "Leading Canadian rental car company hit by DarkSide ransomware", "llm_title": "", "authors": "", "file_creation_date": "0001-01-01T00:00:00Z", "file_modification_date": "0001-01-01T00:00:00Z", "file_size": 2616162, "plain_text": "Leading Canadian rental car company hit by DarkSide ransomware\r\nBy Lawrence Abrams\r\nPublished: 2021-02-13 · Archived: 2026-04-06 01:02:23 UTC\r\nCanadian Discount Car and Truck Rentals has been hit with a DarkSide ransomware attack where the hackers claim to have\r\nstolen 120GB of data.\r\nDiscount Car and Truck Rentals is a leading Canadian car and truck rental company with 300 locations throughout Canada.\r\nEnterprise Holdings’ Canadian subsidiary acquired the company in 2020.\r\nThis month, the car rental company suffered a cyberattack by the DarkSide ransomware gang that has disrupted the\r\ncompany's online rental services at discountcar.com.\r\nhttps://www.bleepingcomputer.com/news/security/leading-canadian-rental-car-company-hit-by-darkside-ransomware/\r\nPage 1 of 6\n\n0:00\r\nhttps://www.bleepingcomputer.com/news/security/leading-canadian-rental-car-company-hit-by-darkside-ransomware/\r\nPage 2 of 6\n\nVisit Advertiser websiteGO TO PAGE\r\n\"Discount Car and Truck Rentals was subject to a ransomware attack that impacted the Discount headquarters office. A\r\nfully-dedicated team isolated and contained the attack quickly. The team is working to investigate and restore service as\r\nquickly and safely as possible,\" Discount Car and Truck Rentals confirmed in a statement to BleepingComputer.\r\nWhile the company restores services, visitors who try to book or manage a rental online are greeted with a message stating\r\nthat the website is down due to technical issues and to call the listed number for assistance.\r\nWebsite experiencing technical issues\r\nDarkSide recently listed the company on their ransomware data leak site where they claim to have stolen 120 GB of\r\nunencrypted data, including finance, marketing, banking, account, and franchisee data.\r\nDarkSide listing for Discount Car and Truck Rentals\r\nAs proof of this data theft, DarkSide posted numerous pictures of alleged Discount Car and Truck Rentals folder listings.  \r\nhttps://www.bleepingcomputer.com/news/security/leading-canadian-rental-car-company-hit-by-darkside-ransomware/\r\nPage 3 of 6\n\nScreenshot of a folder listing\r\nWhile this stolen data's legitimacy is not confirmed, DarkSide is known to exfiltrate unencrypted files before they deploy the\r\nransomware to encrypt devices.\r\nIf you have first-hand information about this or other unreported cyberattacks, you can confidentially contact us on Signal\r\nat +16469613731 or on Wire at @lawrenceabrams-bc.\r\nDarkSide has had its share of drama\r\nSince launching their operation in August 2020, DarkSide has had quite a bit of drama.\r\nIn October 2020, the ransomware gang decided to donate $20,000 of extortion money to the Children International and The\r\nWater Project charities.\r\n\"As we said in the first press release - we are targeting only large profitable corporations. We think it's fair that\r\nsome of the money they've paid will go to charity. No matter how bad you think our work is, we are pleased to\r\nknow that we helped change someone's life.\" - Darkside ransomware operators.\r\nChildren International told BleepingComputer that if the donation was linked to a hacker, they had no intention of keeping\r\nit.\r\nIn November, DarkSide claimed to be building a data leak storage site hosted in Iran to prevent law enforcement from taking\r\nit down.\r\nThese plans backfired on the ransomware operation as it caused ransomware negotiation firm, Coveware, to place DarkSide\r\noperation on an internal restricted list due to concerns about US sanctions.\r\nFinally, last month, Bitdefender released a DarkSide decryptor that allowed victims to recover their files for free.\r\nAccording to the DarkSide gang, this was caused by the same private key used by 40% of their victims.\r\nhttps://www.bleepingcomputer.com/news/security/leading-canadian-rental-car-company-hit-by-darkside-ransomware/\r\nPage 4 of 6\n\nDarkSide statement about Bitdefender's decryptor\r\nThe ransomware operation quickly fixed the issue after the decryptor was released but had already suffered a big reputation\r\nhit among the hacker community.\r\nOther victims known to be attacked by DarkSide ransomware include Brookfield Residential and the Brazilian\r\nEletrobras and Copel energy companies.\r\nAutomated Pentesting Covers Only 1 of 6 Surfaces.\r\nAutomated pentesting proves the path exists. BAS proves whether your controls stop it. Most teams run one without the\r\nother.\r\nThis whitepaper maps six validation surfaces, shows where coverage ends, and provides practitioners with three diagnostic\r\nquestions for any tool evaluation.\r\nhttps://www.bleepingcomputer.com/news/security/leading-canadian-rental-car-company-hit-by-darkside-ransomware/\r\nPage 5 of 6\n\nSource: https://www.bleepingcomputer.com/news/security/leading-canadian-rental-car-company-hit-by-darkside-ransomware/\r\nhttps://www.bleepingcomputer.com/news/security/leading-canadian-rental-car-company-hit-by-darkside-ransomware/\r\nPage 6 of 6", "extraction_quality": 1, "language": "EN", "sources": [ "ETDA" ], "references": [ "https://www.bleepingcomputer.com/news/security/leading-canadian-rental-car-company-hit-by-darkside-ransomware/" ], "report_names": [ "leading-canadian-rental-car-company-hit-by-darkside-ransomware" ], "threat_actors": [], "ts_created_at": 1775439131, "ts_updated_at": 1775791242, "ts_creation_date": 0, "ts_modification_date": 0, "files": { "pdf": "https://archive.orkl.eu/0eb953c16c35131b12b675a11d1065556241242b.pdf", "text": "https://archive.orkl.eu/0eb953c16c35131b12b675a11d1065556241242b.txt", "img": "https://archive.orkl.eu/0eb953c16c35131b12b675a11d1065556241242b.jpg" } }