Hackers publish sensitive employee data stolen during CommScope ransomware attack

Hackers printed a trove of knowledge stolen from U.S. community infrastructure big CommScope, together with hundreds of staff’ Social Safety numbers and checking account particulars. The North Carolina–primarily based firm, which designs and manufactures community infrastructure merchandise for a variety of shoppers, together with hospitals, faculties and U.S. federal agencies, was listed on the darkish … The post Hackers publish sensitive employee data stolen during CommScope ransomware attack appeared first on Ferdja.

May 7, 2023 - 18:00
 1
Hackers publish sensitive employee data stolen during CommScope ransomware attack

Hackers printed a trove of knowledge stolen from U.S. community infrastructure big CommScope, together with hundreds of staff’ Social Safety numbers and checking account particulars.

The North Carolina–primarily based firm, which designs and manufactures community infrastructure merchandise for a variety of shoppers, together with hospitals, faculties and U.S. federal agencies, was listed on the darkish net leak website of the Vice Society ransomware gang.

The itemizing features a hyperlink to information stolen from the corporate. Ransomware gangs sometimes publish stolen information when efforts to safe a monetary ransom demand fall via.

TechCrunch reviewed parts of the information, which embrace inside paperwork, invoices and technical drawings. The trove additionally comprises private information of hundreds of CommScope staff, together with full names, postal addresses, electronic mail addresses, private numbers, Social Safety numbers and checking account data. One other folder among the many leaked information contains scans of worker passports and visa documentation.

The hackers appeared to achieve deep entry to the corporate’s community, exfiltrating backups of knowledge pertaining to its MyCommScope buyer portal and its inside intranet. Among the information was unencrypted and appeared to incorporate each CommScope buyer and worker electronic mail addresses.

It’s unclear precisely what number of staff have been affected. CommScope employs greater than 30,000 individuals worldwide.

CommScope spokesperson Cheryl Przychodni confirmed to TechCrunch that the corporate detected “unauthorized entry to a portion of our IT infrastructure that we decided was the results of a ransomware incident” on March 27.

“Upon discovery, we instantly launched a forensic investigation with the help of a number one cybersecurity agency and reported the matter to regulation enforcement,” Przychodni stated, including that the corporate is investigating Vice Society’s claims that it has printed data from the corporate’s community.

“We’re working with our third-party specialists to validate these claims and to grasp the character of the data at difficulty as a prime precedence,” she stated. “We’re present process an intensive assessment of any impacted information with all attainable velocity.”

CommScope declined to reply our questions associated to the leaked worker information and it’s unclear if the corporate has notified affected staff.

Przychodni added that CommScope has seen no proof that buyer data was accessed in the course of the breach, however declined to say if the corporate has the means — like server logs — to find out what information was taken from its methods.

CommScope additionally declined to say how its methods have been compromised or whether or not it has obtained any communication from the Vice Society hackers.

The Vice Society ransomware gang first made headlines in 2022 throughout a spate of cyberattacks focusing on the healthcare and training sectors. One of many largest breaches noticed the hackers publish a 500GB trove of stolen delicate information from the Los Angeles Unified Faculty District (LAUSD), which included psychological assessments and different extremely private data of scholars.

The gang not too long ago turned its consideration to the manufacturing sector, based on cybersecurity firm Trend Micro, which stated Vice Society will possible stay a “vital participant” within the ransomware panorama.


Do you’re employed at CommScope? Have you learnt extra concerning the information breach? You may contact Carly Web page securely on Sign at +441536 853968, or by electronic mail.  You too can contact Zack Whittaker on Sign at +1 646-755-8849 or zack.whittaker@techcrunch.com. You too can share information and paperwork with TechCrunch by way of our SecureDrop.

The post Hackers publish sensitive employee data stolen during CommScope ransomware attack appeared first on Ferdja.