In 2023, Slade Shipping in the USA fell victim to a sophisticated ransomware attack orchestrated by the ALPHV ransomware group. The intrusion began with a malicious phishing email containing a modified IcedID variant, which facilitated the deployment of ScreenConnect for remote access. Attackers leveraged advanced tools, including Cobalt Strike beacons and CSharp Streamer RAT, to escalate privileges, harvest credentials, and move laterally across the network. A custom exfiltration tool, confucius_cpp, was used to extract sensitive data before deploying the ALPHV ransomware payload. Prior to encryption, backups were deliberately deleted to hinder recovery. The attack resulted in severe operational disruption, including potential data breaches of sensitive corporate and customer information, alongside a ransom demand communicated via a note referencing ALPHV’s Twitter profile. The incident forced Slade Shipping to grapple with extended downtime, financial losses, and reputational damage, while the full scope of compromised data remained under investigation.