Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Data Breaches

Deloitte Says No Threat to Sensitive Data After Hacker Claims Server Breach

Deloitte says no sensitive data exposed after a notorious hacker leaked what he claimed to be internal communications. 

Deloitte hacked

A notorious hacker has announced the theft of data from an improperly protected server allegedly belonging to Deloitte.

The hacker known as IntelBroker announced late last week on the BreachForums cybercrime forum the availability of “internal communications” obtained from Deloitte, specifically an internet-exposed Apache Solr server that was accessible with default credentials. 

The hacker claims the stolen data includes email addresses, communications between intranet users, and internal settings. 

The data is available for download to the hacking forum’s active users or those who have purchased credits. 

The audit and consulting giant has confirmed being aware of the claims and a statement provided to SecurityWeek suggests that the company did indeed suffer a data breach, but impact is limited. 

“Our investigation has found no threat to client data or other sensitive data related to this incident,” Deloitte said in an emailed statement. 

Advertisement. Scroll to continue reading.

BreachForums has been used by many hackers to announce allegedly successful attacks on high-profile companies, but their claims are often false or exaggerated. 

Malwarebytes on Monday looked at posts advertising data leaks allegedly impacting SpaceX and the White House, but the cybersecurity firm concluded that “it’s probably not worth giving it the time of day”.

Related: Identity of Notorious Hacker USDoD Revealed

Related: Data of Millions of mSpy Customers Leaked Online

Related: Disney Investigating Hacker Group’s Data Theft Claims

Written By

Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Today’s attackers are no longer breaking in — they’re logging in. Join this live webinar as we break down the modern identity attack chain and examine how recent breaches exploited weaknesses in authentication, identity verification, and access management processes.

Register

AI has accelerated both sides of the fight. Adversaries are weaponizing vulnerabilities faster, while defenders are racing to ship detections and configurations. Join this live webinar as we explore how to prove your controls actually hold against new threats, map your security maturity, and unite breach simulation with automated pentesting into a single, coordinated program.

Register

People on the Move

Stephen Garcia has been named Chief Information Security Officer at BreachRx.

Kasper Lindgaard has been appointed Vice President of Security Strategy at CoreView.

Chaim Mazal has been named Chief Information Security Officer at GitLab.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.