They also attacked other companies like Toshiba Tec Corp manufacturer of barcode scanners, printers, and other electrical equipment, and they have access of 740GB stolen data.
Brenntag also paid 78.29 BTC on May 11 to same DarkSide group and Elliptic tracked DarkSide wallet and it appears their servers for blog website, payment processing and DoS operations had been seized.
Some mainstream media earlier claimed that this payment was made with anonymous cryptocurrency but we now know it was Bitcoin.
I am still trying to find and identify their wallet address that had 57 payments from 21 wallets address.
https://www.elliptic.co/blog/elliptic-follows-bitcoin-ransoms-paid-by-darkside-ransomware-victims
When I first read it I was sure they are going to pay if the amount is cleverly chosen. That's what the hackers did. What I am asking myself is though why don't the hackers ask for an anonymous cryptocurrency? They now have all the hassle to get the BTC through mixers and exchanges. Or they do have agreed upon p2p deals at discounts. That could be a possibility, maybe even the most likely possibility of all of them.