Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Data Breaches

Deloitte Says No Threat to Sensitive Data After Hacker Claims Server Breach

Deloitte says no sensitive data exposed after a notorious hacker leaked what he claimed to be internal communications. 

Deloitte hacked

A notorious hacker has announced the theft of data from an improperly protected server allegedly belonging to Deloitte.

The hacker known as IntelBroker announced late last week on the BreachForums cybercrime forum the availability of “internal communications” obtained from Deloitte, specifically an internet-exposed Apache Solr server that was accessible with default credentials. 

The hacker claims the stolen data includes email addresses, communications between intranet users, and internal settings. 

The data is available for download to the hacking forum’s active users or those who have purchased credits. 

The audit and consulting giant has confirmed being aware of the claims and a statement provided to SecurityWeek suggests that the company did indeed suffer a data breach, but impact is limited. 

“Our investigation has found no threat to client data or other sensitive data related to this incident,” Deloitte said in an emailed statement. 

Advertisement. Scroll to continue reading.

BreachForums has been used by many hackers to announce allegedly successful attacks on high-profile companies, but their claims are often false or exaggerated. 

Malwarebytes on Monday looked at posts advertising data leaks allegedly impacting SpaceX and the White House, but the cybersecurity firm concluded that “it’s probably not worth giving it the time of day”.

Related: Identity of Notorious Hacker USDoD Revealed

Related: Data of Millions of mSpy Customers Leaked Online

Related: Disney Investigating Hacker Group’s Data Theft Claims

Written By

Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

With "Shadow AI" usage becoming prevalent in organizations, learn how to balance the need for rapid experimentation with the rigorous controls required for enterprise-grade deployment.

Register

Delve into big-picture strategies to reduce attack surfaces, improve patch management, conduct post-incident forensics, and tools and tricks needed in a modern organization.

Register

People on the Move

MongoDB has appointed Doug Bowers as Chief Information Security Officer.

Ben Wilkens has been promoted to Director of Cybersecurity at NMFTA.

Cato Networks has appointed Meital Koren as Chief Legal Officer.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.