Security Experts:

Hackers Claim to Have Stolen 60 GB of Data From Acer

A group of hackers claims to have stolen more than 60 gigabytes of data after breaching servers belonging to Taiwanese tech giant Acer.

In a post on a publicly accessible hacker forum, a group calling itself “Desorden” claimed to have stolen databases and other files from breached Acer India servers.

The hackers shared a link to a sample of the stolen data and they promised to leak more once they have analyzed it. They also published a video showing the files they allegedly stole from Acer.

They claim the stolen files include information on millions of customers, login credentials used by thousands of Acer retailers and distributors, as well as corporate, financial and audit documents.

Acer hacked

Desorden previously claimed that it asks targeted organizations to pay a ransom, and they sell the stolen data on the black market if the victim refuses to pay up.

Acer has confirmed the incident, which it described as “an isolated attack on our local after-sales service system in India.” The company said it conducted a full scan of its systems after becoming aware of the breach, and it has started notifying all potentially impacted customers in India.

Acer claimed the attack has “no material impact to our operations and business continuity.” The company said it reported the incident to the Indian CERT and law enforcement.

Reports emerged in March that Acer had been targeted in a REvil ransomware attack, with the hackers demanding a $50 million ransom. In that attack, threat actors apparently stole data and encrypted files on compromised systems.

Related: Colossus Ransomware Hits Automotive Company in the U.S.

Related: Engineering Company Weir Group Discloses Ransomware Hack

Related: DarkSide Ransomware Hits Toshiba Tec Group

view counter
Eduard Kovacs (@EduardKovacs) is a contributing editor at SecurityWeek. He worked as a high school IT teacher for two years before starting a career in journalism as Softpedia’s security news reporter. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.