North American land developer and homebuilder Brookfield Residential is the first victim of the new DarkSide Ransomware. DarkSide will breach a network and spread laterally between devices while stealing unencrypted data. Upon gaining access to a Windows domain controller, the threat actors deploy ransomware throughout the network. As part of their extortion strategy, DarkSide will create an entry for each victim whose data has been stolen on their data leak site.