The "Cuba" ransomware gang's dedicated data-leaking site A ransomware-wielding gang has hit a Seattle-based billing and payment processing provider used by organizations and government agencies across California and Washington. The "Cuba" ransomware gang has taken credit for the hit against Automatic Funds Transfer Services, saying on its dedicated leaks site - reachable only via the anonymizing Tor browser - that it left AFTS crypto-locked as of Feb. 4. The leaks site listing says "financial documents, correspondence with bank employees, account movements, balance sheets and tax documents" were among the information the gang stole. The AFTS listing on Cuba's leaks site also states that the ransom demand was "paid."