The Philippines division of Taiwanese tech agency Acer has confirmed that info associated to its staff has been leaked after a third-party vendor suffered a safety breach.
An attacker referred to as “ph1ns” posted a hyperlink on a hacking discussion board to a stolen database containing worker attendance knowledge from Acer Philippines. The database reportedly included staff’ names, usernames, passwords, roles, departments, employer’s title, birthdates, cell numbers, and e mail addresses.
Ph1ns mentioned they weren’t promoting the info, however providing it without spending a dime to anybody .
Is the free entry to the stolen knowledge a sign that the attacker doesn’t assume that the stolen info is simple to monetise or an altruistic act by Ph1ns?
Your guess is nearly as good as mine. However the hack of the unnamed third-party vendor was claimed to have occurred below the banner of “#OpEDSA” – a motion calling for political change within the Philippines, which has focused corporations within the nation.
It is value underlining that the stolen knowledge was not taken instantly from Acer, and there was no proof of a breach within the firm’s techniques.
As a substitute, it seems that the corporate managing Acer Philippines worker attendance knowledge suffered its personal safety breach. In fact, that’s little consolation for staff who will probably be understandably sad that their private particulars have fallen into the palms of hackers and are being shared through hacking boards.
In an announcement posted on Twitter, Acer Philippines additionally emphasised that no buyer knowledge was uncovered as a result of leak.
That is actually a silver lining for Acer laptop computer consumers. And a greater scenario than nearly ten years in the past when Acer’s ecommerce web site was hacked permitting hackers to steal clients’ particulars, together with (gulp!) cost card info.
Acer can as soon as extra argue that it wasn’t its infrastructure that was hacked, however it has suffered safety breaches up to now – together with a $50 million ransomware assault, the theft of 60GB value of information from its Indian servers.
All companies have to safe their techniques and trust that the info entrusted to 3rd events will probably be stored safely out of the attain of hackers.
