Acer admits owning the sold stolen data on a hacking forum

Acer, one of Taiwan’s most successful companies, confirmed that it experienced a data breach incident after threat actors infiltrated one of their servers that hosts essential documents used by their repair team.

The company’s preliminary investigation of its systems showed that the cybercriminal operation did not impact customer data. However, the company confirmed the incident after the threat actors started selling some stolen datasets on a well-known hacking forum.

The attackers claimed they stole 160 gigabytes of data from the Taiwanese company last month.

 

Acer revealed that the threat actors obtained data from one portion of their operations.

 

The Acer hackers claimed the stolen data included several essential company operations tools. The confirmed products within the stolen info are technical manuals, backend infrastructure details, tablets, laptops, BIOS images, ISO files, RDPK, software tools, and phone product model documentation.

The threat actors also shared screenshots of technical schematics for some of Acer’s products to prove they acquired some of the company’s product details.

The poster of the data revealed that the miscreants were selling the whole dataset to an individual that could give the highest bid. In addition, the threat group clarified that they would only accept Monero as payment.

The proof of stolen data forced the tech company to admit that it suffered a data breach incident, resulting in the loss of critical information. The company is still investigating and assured everyone that their customer data remained unaffected.

This recent cybersecurity breach against Acer has become the latest incident against the company in the last two years. A couple of years ago, the REvil ransomware group demanded $50 million in exchange for a decryptor while threatening to leak confidential financial details.

Furthermore, the Desorden group also breached Acer Taiwan’s server in the same year. The attack resulted in the loss of employee information and login credentials.

This big-time Taiwanese computer manufacturing company has been the subject of many ransomware operations for the past few years. This detail implies that threat groups have been evolving as they could easily pass the security of one of the world’s largest companies.